Lexology March 25, 2024
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued updated guidance on the use of online tracking technologies by HIPAA-covered entities and business associates.
Here are some of the key aspects of the updated guidance:
Key Definitions
- Tracking technology—defined by the OCR as “a script or code on a website or mobile app used to gather information about users or their actions as they interact with a website or mobile app.”
- Individually identifiable health information (IIHI)—a subset of health information, including demographic information collected from an individual, that is created or received by a covered entity (or its business associate) or employer; relates to the past, present or future health, health...