Individuals have the right to demand that a covered entity limit how protected health information is used or disclosed for purposes such as treatment, payment, or healthcare processes, disclosure to people helping with the individual’s care or paying for it, or disclosure to let family members or others know where the person is or if they have passed away.
Requests for restrictions are not required to be acceded to by a covered entity.