An interesting article in HealthLeaders News this week: Work with Marketing to Ensure HIPAA Compliance. It states that information you need to market to current and former patients is "... currently contained in their medical records that you possess. However, the methods and circumstances that you can use this internal database to market are now regulated by portions of HIPAA."
"But what are those circumstances? What types of activities are now under the glare of HIPAA?" The article goes on to explain what is and what is not.