HealthIT Answers December 29, 2020
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) (@HHSGov) issued guidance on how the Health Insurance Portability and Accountability Act of 1996 (HIPAA) permits covered entities and their business associates to use health information exchanges (HIEs) to disclose protected health information (PHI) for the public health activities of a public health authority (PHA).
The guidance provides examples relevant to the COVID-19 public health emergency on how HIPAA permits covered entities and their business associates to disclose PHI to an HIE for reporting to a PHA that is engaged in public health activities. The guidance answers these questions:
- What is an HIE?
- When does the HIPAA Privacy Rule permit a covered entity...