During the COVID-19 public health emergency (PHE), many federal telehealth rules were made flexible to accommodate the need for continued access to health care, including allowing covered health-care providers to provide telehealth services to patients through remote technologies that may not have fully complied with the requirements of the Health Information Portability and Accountability Act of 1996 (HIPAA), as amended, including its implementing regulations.
Since March 17, 2020, the Office for Civil Rights (OCR), the agency tasked with enforcing HIPAA, has exercised enforcement discretion to not impose penalties for such noncompliance. On May 11, 2023, OCR’s enforcement discretion expired, and the U.S. Department of Health and Human Services (HHS) released a fact sheet that details how OCR will continue to support the use of telehealth after the PHE by providing a 90-calendar-day transition period for covered health-care providers to make any changes to operations required to provide telehealth in compliance with HIPAA. Thus, compliance enforcement will not resume until after August 9, 2023.
Related Posts
Proposed Regulation Would Remove Medical Bills from Credit Reports
On September 21, the Consumer Financial Protection Bureau (CFPB) announced the beginning of a rulemaking process to remove medical bills from Americans’ credit reports. The CFPB outlined proposals under consideration that would “help families financially recover from medical crises, stop debt collectors from coercing people into paying bills they may not even owe, and ensure…
American Telemedicine Association Publishes New Health Data Privacy Principles
Amid rising concerns about data privacy within the telehealth arena, the American Telemedicine Association (ATA) released a set of principles to ensure patient data is protected during telehealth utilization. The ATA’s Health Data Privacy Principles include six components: The ATA states that a federal policy would offer much-needed consistency in data privacy practices for telehealth providers…
New Federal Resource on Protecting the Privacy and Security of Consumer’s Health Information
The Federal Trade Commission (FTC) and the Department of Health and Human Services (HHS) recently released a joint publication that provides guidance and practical advice to all entities that collect, share, or use consumer information. Collecting, Using, or Sharing Consumer Health Information gathers all of the various legal obligations in one place and focuses on…