This sample outlines a set of policies and procedures to give guidance and ensure compliance with all relevant laws and regulations (e.g. HIPAA) when using or disclosing protected health information (PHI). A covered entity may use or disclose PHI to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of such law.