•Data Use Agreement – document used to create and disclose a Limited Data Set
•Designated Record Set – The part of the medical record used for patient care/treatment
•Minimum Necessary Standard – under certain conditions the covered entity must limit the access to PHI
•Accounting of Disclosures – under certain conditions the covered entity must track disclosures of PHI, such as waiver of authorization