Lexology August 29, 2025
Earlier this month, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), released a new Frequently Asked Question (FAQ) related to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule, which establishes national standards to safeguard “protected health information” or “PHI.”
The HIPAA Privacy Rule guidance was announced in a post by HHS OCR, stating that the new FAQ is to support a new initiative by the Centers for Medicare & Medicaid Services (CMS) called the Digital Health Technology Ecosystem. Launched on July 30, 2025, CMS’s Health Technology Ecosystem aspires to modernize the nation’s digital health care data exchange and “Make Health Tech Great Again” by “promoting a CMS Interoperability Framework to...







