East County News Service
April 2, 2020 (Washington D.C.) -- Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services announced that effective immediately, it will exercise its enforcement discretion and will not impose penalties for violations of certain provisions of the HIPAA Privacy Rule against health care providers or their business associates for good faith uses and disclosures of protected health information by business associates for public health and health oversight activities during the COVID-19 nationwide public health emergency.
This Notification was issued to support Federal public health authorities and health oversight agencies, like the Centers for Disease Control and Prevention (CDC) and Centers for Medicare and Medicaid Services (CMS), state and local health departments, and state emergency operations centers who need access to COVID-19 related data, including protected health information.
“The CDC, CMS, and state and local health departments need quick access to COVID-19 related health data to fight this pandemic,” said Roger Severino, OCR Director. “Granting HIPAA business associates greater freedom to cooperate and exchange information with public health and oversight agencies can help flatten the curve and potentially save lives,” Severino added.
This Notification of Enforcement Discretion may be found at: https://www.hhs.gov/sites/default/files/notification-enforcement-discretion-hipaa.pdf
OCR has a new webpage with all COVID-19 related materials issued by OCR at: https://www.hhs.gov/hipaa/for-professionals/special-topics/hipaa-covid19/index.html.