Under what circumstances can health information be used?

Healthcare consultants and other companies that work for insurance companies use health information. Per HIPAA, the data is required to be confidential and secure. The data is de-identified (no information that can be used to identify individuals) unless identifiable information is absolutely needed.