JAMA Network July 26, 2022
The US Department of Health and Human Services (HHS) issued a guidance on providing audio-only telehealth services that are compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA)—even when the COVID-19 public health emergency enforced by the HHS Office for Civil Rights (OCR) expires. HHS’ guidance offers direction on how to use remote communication technologies in ways that conform to HIPAA’s privacy, security, and breach notification rules.
According to the guidance, the HIPAA Security Rule—which requires health care professionals to safeguard the privacy and security of patients’ electronic protected health information (ePHI)—isn’t applicable to audio-only telehealth services when using traditional landline telephones, as information isn’t transmitted electronically during those calls. Conversely, electronic technologies that require HIPAA compliance...