Generally speaking, accounting of disclosures is not required if the disclosure is made for treatment, payment or operations purposes. Given this as it relates to your specific questions, you should be OK, but I would still recommend that you confirm this with a HIPAA consultant or attorney that is completely familiar with your business practices.
For more information on this topic, visit these other SearchSecurity.com resources:
Dig deeper on Identity Theft and Data Security Breaches
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.