This week the U.S. Department of Health and Human Services (HHS) took action to waive penalties and refrain from enforcing certain federal health information privacy restrictions under the Health Insurance Portability and Accountability Act (HIPAA) in response to COVID-19.
First, effective March 15, 2020, HHS Secretary Alex Azar exercised his statutory authority to issue a waiver of penalties and sanctions that would otherwise apply to certain hospitals for violations of specified provisions of the HIPAA Privacy Rule. These provisions include requirements to honor patients’ requests for privacy restrictions and certain confidential communications and the requirement to obtain consent before speaking with family members or friends involved in the patient’s care. The waiver applies only to hospitals that have instituted a disaster protocol and only for up to 72 hours from the time the hospital implements its disaster protocol. The waiver does not affect state laws that may restrict disclosures of health information and is not effective with respect to action that discriminates “among individuals on the basis of their source of payment or their ability to pay.” The agency’s announcement clarifies that though the HIPAA Privacy Rule is not suspended during emergencies, there are a variety of regulatory provisions in HIPAA that permit disclosures of health information in particular circumstances relevant to public health emergencies.
Second, on March 17, the HHS Office for Civil Rights announced that it would exercise its enforcement discretion and not impose penalties for noncompliance with HIPAA against healthcare providers in connection with the good-faith provision of telehealth services. The announcement specified, however, that certain public-facing platforms should not be used for these services.
President Donald Trump mentioned the administration’s action on HIPAA in his March 17, 2020, press conference.
To learn more about privacy and other legal issues related to COVID-19 response, visit Sidley’s COVID-19 Resource Center.
Sidley Austin LLPはクライアントおよびその他関係者へのサービスの一環として本情報を教育上の目的に限定して提供します。本情報をリーガルアドバイスとして解釈または依拠したり、弁護士・顧客間の関係を結ぶために使用することはできません。
弁護士広告 - ニューヨーク州弁護士会規則の遵守のための当法律事務所の本店所在地は、Sidley Austin LLP ニューヨーク：787 Seventh Avenue, New York, NY 10019 (+212 839 5300)、シカゴ：One South Dearborn, Chicago, IL 60603、(+312 853 7000)、ワシントン：1501 K Street, N.W., Washington, D.C. 20005 (+202 736 8000)です。