A covered entity can share protected health information with a telemarketer with the expressed written consent of an individual or if they have a business agreement with a telemarketer.such as to inform individuals about the covered entity’s own goods or services.

The telemarketer must agree, by contract, to use the information only for communicating on behalf of the covered entity, and inform individuals about the covered entity’s own goods or services. The telemarketer is not permitted to market either its own goods or services, or those of an outside entity.