Good Faith Provision of Telehealth During COVID -19 Public Health Emergency

03.23.20

In an unprecedented announcement (and on the heels of other directives on healthcare privacy matters), the Office for Civil Rights (OCR) of the U.S. Department of Health & Human Services (HHS) issued a statement on March 17, 2020, that it will not impose penalties against covered entity healthcare providers in connection with their “good faith provision of telehealth services” as long as the Public Health Emergency related to COVID-19 is in place. OCR is the federal agency responsible for the regulation and enforcement of the Health Insurance Portability and Accountability Act of 1996 and its Privacy and Security Rules (together, HIPAA).

Typically, HIPAA requires that healthcare providers use video communication products from technology vendors that are HIPAA-compliant and only if they enter HIPAA business associate agreements with such vendors. This is a best practice for any healthcare provider to comply with HIPAA and to minimize the risk of a data privacy breach. OCR specifically references examples of HIPAA-compliant vendors in its notice:

  • Skype for Business/Microsoft Teams
  • Updox
  • VSee
  • Zoom for Healthcare
  • Doxy.me
  • Google G Suite Hangouts Meet

Even with this list, OCR recognizes that some healthcare providers may not have the infrastructure in place to facilitate video-conferencing during the COVID-19 Public Health Emergency. Accordingly, OCR will not preclude the temporary use of popular apps like: Apple FaceTime, Facebook Messenger video chat, Google Hangouts video, or Skype. But OCR does clarify that public facing apps such as Facebook Live, Twitch, TikTok, or other similar video communication applications are not permitted for telehealth services. Accordingly, use of public facing apps could still subject a healthcare provider to HIPAA penalties for non-compliance.

Link: Notification of Enforcement Discretion

 

Contacts:

Sarah Churchill Llamas l 512.370.2889 l sllamas@winstead.com 

Corinne Smith | 512.370.2808 | cssmith@winstead.com

Kevin Wood | 512.370.2826 | kwood@winstead.com

Disclaimer: Content contained within this news alert provides information on general legal issues and is not intended to provide advice on any specific legal matter or factual situation. This information is not intended to create, and receipt of it does not constitute, a lawyer-client relationship. Readers should not act upon this information without seeking professional counsel.

Media Contact

Stephen Hastings
Director of Communications & Media Relations  
713.650.2485 Direct
832.343.4228 Mobile
shastings@winstead.com

Search Tips:

You may use the wildcard symbol (*) as a root expander.  A search for "anti*" will find not only "anti", but also "anti-trust", "antique", etc.

Entering two terms together in a search field will behave as though an "OR" is being used.  For example, entering "Antique Motorcars" as a Client Name search will find results with either word in the Client Name.

Operators

AND and OR may be used in a search.  Note: they must be capitalized, e.g., "Project AND Finance." 

The + and - sign operators may be used.  The + sign indicates that the term immediately following is required, while the - sign indicates to omit results that contain that term. E.g., "+real -estate" says results must have "real" but not "estate".

To perform an exact phrase search, surround your search phrase with quotation marks.  For example, "Project Finance".

Searches are not case sensitive.

back to top