HIPAA and Data Privacy

The resources below provide an overview of the HHS and OCR response to COVID-19.

HHS Resources on HIPAA and COVID-19

Notices of Enforcement Discretion

• Notice of Enforcement Discretion for Business Associates
• Notice of Enforcement Discretion for Telehealth Remote Communications

Bulletins

• March 28, 2020 | OCR Bulletin: Civil Rights, HIPAA, and COVID-19
• March 2020 | HHS Bulletin: Limited Waiver of HIPAA Sanctions and Penalties During a National Public Health Emergency
• February 2020 | HHS Bulletin: HIPAA Privacy and Novel Coronavirus

Guidance

• HIPAA Privacy Rule and Public Health: Guidance from CDC and the U.S. Department of Health and Human Services

Tools

• HIPAA Privacy Rule: Disclosures for Emergency Preparedness Decision Tool