Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

§ 164.514(d)(3)(i)§ 164.514(d)(3)(i)

>Control Description

For any type of disclosure that it makes on a routine and recurring basis, a covered entity must implement policies and procedures (which may be standard protocols) that limit the protected health information disclosed to the amount reasonably necessary to achieve the purpose of the disclosure.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.