The U.S. Health and Human Services Office for Civil Rights (OCR) will end enforcement discretion for telehealth providers who utilize remote communication products that don’t comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 90-days after the end of the COVID-19 public health emergency. Healthcare providers will need to comply with HIPAA rules when providing virtual care services effective Aug. 9, 2023. All covered entities are expected to be in compliance with HIPPA Privacy, Secuirty and Breach Notification Rules or face penalties for violation.
Members with questions can contact Renée Smiddy at the MHA.