A person can specify the information disclosed to employers and insurance companies. For example, an applicant for insurance may write on a form: “ONLY physical examinations for the last two years may be sent in response to this request.”

There is no law that states that a person must disclose that they were treated for a sexually transmitted disease in the past. It is only necessary to release information from a physical examination relevant to their present qualifications for a job. This precaution may also help to prevent potential employers from seeing genetic testing results that may be in a person’s PHI.

While access may be controlled by the patient for information provided to insurance and employers, there are special rules that apply to the following:

• Psychotherapy notes

• Subpoenas and other legal proceedings

• Correctional facility’s medical records

• Potential harm or threat to public health

• Information obtained in the course of research