GAO Calls on OCR to Educate Patients on Telehealth Security, Privacy Risks
Health IT Security September 29, 2022
GAO’s review of Medicare telehealth services delivered during the pandemic revealed some gaps in telehealth security and privacy communications.
The US Government Accountability Office (GAO) conducted a review of Medicare telehealth services delivered during the pandemic, recommending that the Office for Civil Rights (OCR) provide additional guidance to providers on how to communicate telehealth security and privacy risks to patients.
The COVID-19 pandemic incentivized HHS to temporarily waive certain Medicare restrictions on telehealth use. In addition, in March 2020, OCR announced that it would not impose penalties on providers in regard to noncompliance with certain security and privacy requirements under HIPAA.
OCR’s announcement allowed HIPAA-covered providers to engage in telehealth services without a business associate agreement in place with...