Minimum Necessary

Covered entities may use and share only the minimum amount of protected information necessary to accomplish a particular purpose.

DHS is responsible for determining the amount of PHI required per function. Upon determination of minimum necessary PHI, DHS will communicate this decision to all affected parties.