Under the Health Insurance Portability and Accountability Act (HIPAA), a log that lists the individuals and companies that have received personal health information (PHI) for use that is unrelated to treatment and payment. Items to be documented must include date of disclosure, name of entity that received the PHI, brief description of the PHI disclosed, and brief statement of the purpose of the disclosure.