Lexology September 23, 2024
In December 2022, the Office of Civil Rights (OCR) issued a bulletin (2022 Bulletin) warning Health Insurance Portability and Accountability Act (HIPAA) covered entities and business associates about the use of online tracking technologies, that are often part of an entity’s website or mobile application.
In the 2022 Bulletin, the OCR stated that when individually identifiable health information (IIHI), such as the individual’s medical record number, home or email address, dates of appointments, IP address or geographic location, is collected through a regulated entity’s website or app, that IIHI will generally be PHI, even if the individual does not have a relationship with the regulated entity and the IIHI does not include any treatment or billing information.
Lawsuits
Following issuance...
Today's Sponsors
Today's Sponsor