Sec. 13406. Conditions on Certain Contacts as Part of Health Care Operations.
(a) Marketing.—
(1) In General.—A communication by a covered entity or business associate that is about a product or service and that encourages recipients of the communication to purchase or use the product or service shall not be considered a health care operation for purposes of subpart E of part 164 of title 45, Code of Federal Regulations, unless the communication is made as described in subparagraph (i), (ii), or (iii) of paragraph (1) of the definition of marketing in section 164.501 of such title.
(2) Payment for Certain Communications.—A communication by a covered entity or business associate that is described in subparagraph (i), (ii), or (iii) of paragraph (1) of the definition of marketing in section 164.501 of title 45, Code of Federal Regulations, shall not be considered a health care operation for purposes of subpart E of part 164 of title 45, Code of Federal Regulations if the covered entity receives or has received direct or indirect payment in exchange for making such communication, except where—
(A) (i) such communication describes only a drug or biologic that is currently being prescribed for the recipient of the communication; and
(ii) any payment received by such covered entity in exchange for making a communication described in clause (i) is reasonable in amount;
(B) each of the following conditions apply—
(i) the communication is made by the covered entity; and
(ii) the covered entity making such communication obtains from the recipient of the communication, in accordance with section 164.508 of title 45, Code of Federal Regulations, a valid authorization (as described in paragraph (b) of such section) with respect to such communication; or
(C) each of the following conditions apply—
(i) the communication is made by a business associate on behalf of the covered entity; and
(ii) the communication is consistent with the written contract (or other written arrangement described in section 164.502(e)(2) of such title) between such business associate and covered entity.
(3) Reasonable in Amount Defined.—For purposes of paragraph (2), the term ‘‘reasonable in amount’’ shall have the meaning given such term by the Secretary by regulation.
(4) Direct or Indirect Payment.—For purposes of paragraph (2), the term ‘‘direct or indirect payment’’ shall not include any payment for treatment (as defined in section 164.501 of title 45, Code of Federal Regulations) of an individual.
(b) Opportunity to Opt Out of Fundraising.—The Secretary shall by rule provide that any written fundraising communication that is a healthcare operation as defined under section 164.501 of title 45, Code of Federal Regulations, shall, in a clear and conspicuous manner, provide an opportunity for the recipient of the communications to elect not to receive any further such communication. When an individual elects not to receive any further such communication, such election shall be treated as a revocation of authorization under section 164.508 of title 45, Code of Federal Regulations.
(c) Effective Date.—This section shall apply to written communications occurring on or after the effective date specified under section 13423.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.