You are here: Home / News / OCR Issues Guidance on HIPAA, Health Information Exchanges, and Disclosures of Protected Health Information for Public Health Purposes | December 18, 2020

OCR Issues Guidance on HIPAA, Health Information Exchanges, and Disclosures of Protected Health Information for Public Health Purposes | December 18, 2020

Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued guidance on how the Health Insurance Portability and Accountability Act of 1996 (HIPAA) permits covered entities and their business associates to use health information exchanges (HIEs) to disclose protected health information (PHI) for the public health activities of a public health authority (PHA).

 

OCR Issues Guidance on HIPAA, Health Information Exchanges, and Disclosures of Protected Health Information for Public Health Purposes | December 18, 2020

 

December 18, 2020

OCR Issues Guidance on HIPAA, Health Information Exchanges, and Disclosures of Protected Health Information for Public Health Purposes

 

Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued guidance on how the Health Insurance Portability and Accountability Act of 1996 (HIPAA) permits covered entities and their business associates to use health information exchanges (HIEs) to disclose protected health information (PHI) for the public health activities of a public health authority (PHA).

 

The guidance provides examples relevant to the COVID-19 public health emergency on how HIPAA permits covered entities and their business associates to disclose PHI to an HIE for reporting to a PHA that is engaged in public health activities. The guidance answers these questions:

  • What is an HIE?
  • When does the HIPAA Privacy Rule permit a covered entity or its business associate to disclose PHI to an HIE for purposes of reporting the PHI to a PHA, without an individual's authorization?
  • Can a covered entity rely on a PHA's request to disclose a summary record to a PHA or HIE as being the minimum necessary PHI needed by the PHA to accomplish the public health purpose of the disclosure?
  • May a covered entity disclose PHI to a PHA through an HIE without receiving a direct request from the PHA?
  • May an HIE provide PHI it has received as a business associate of a covered entity to a PHA for public health purposes without first obtaining permission from the covered entity?
  • Is a covered entity required to provide notice to individuals about its disclosures of PHI to a PHA for public health purposes? Is an HIE that is a business associate required to provide such notice?

 

"OCR is issuing this guidance to highlight how HIPAA supports the use of health information exchanges in sharing health data to improve the public's health, particularly during the COVID-19 public health emergency," said OCR Director Roger Severino.

 

The Guidance on HIPAA, Health Information Exchanges, and Disclosures for Public Health Purposes may be found at: https://www.hhs.gov/sites/default/files/hie-faqs.pdf.

###

Upcoming Events
Perry County Free Legal Clinic | Tuesday, March 5, 2024 Mar 05, 2024 03:30 PM - 04:30 PM — Perry County Juvenile/Probate Court - 106 S Main Street, New Lexington, OH 43764
PBHC Black Balloon Day | Wednesday, March 6, 2024 Mar 06, 2024 12:00 PM - 04:00 PM — Perry Behavioral Health Choices Activity Center - 112 S Main St, New Lexington, OH 43764
FREE Women's Health Clinic in New Lexington | Thursday, March 7, 2024 Mar 07, 2024 09:30 AM - 03:00 PM — Kroger Parking Lot - 610 Carroll St, New Lexington, OH 43764
Perry County Park District Board of Park Commissioners Meeting | Monday, March 11, 2024 Mar 11, 2024 02:30 PM - 03:30 PM — Somerset Courthouse - 100 Public Square, Somerset OH 43783
PCBDD is Now Recruiting for the Staff and Providers vs Cougars Basketball Game | Wednesday, March 13, 2024 Mar 13, 2024 06:00 PM - 07:30 PM — Mount Aloysius - 5375 Tile Plant Rd, New Lexington, OH 43764
Upcoming events…