HHS Waives Certain HIPAA Privacy Sanctions

HHS Waives Certain HIPAA Privacy Sanctions

Certain HIPAA sanctions and penalties are being waived for hospitals during the nationwide emergency concerning COVID-19.

Which Privacy Rule Provisions Are Waived?

Effective March 15, 2020, covered hospitals will not be held to comply with the following provisions of the HIPAA Privacy Rule:

  • The requirements to obtain a patient’s agreement to speak with family members or friends involved in the patient’s care.
  • The requirements to honor a request to opt out of the facility directory.
  • The requirement to distribute a notice of privacy practices.
  • The patient’s right to request privacy restrictions.
  • The patient’s right to request confidential communications.

What Are Covered Hospitals?

The waiver to certain HIPAA Privacy Rule requirements only applies to hospitals in the emergency area identified in the public health emergency declaration and only for up to 72 hours after instituting a disaster protocol.

This waiver terminates when the president or secretary of the Department of Health and Human Services declares the nationwide emergency has ended — something we are all anxiously awaiting. At such time, all HIPAA provisions will be enforced, and hospitals will be expected to comply — even if 72 hours have not elapsed since implementation of a hospital’s disaster protocol.

Certified Professional Compliance Officer - CPCO

Read the HHS March 20 bulletin for more information about HIPAA privacy and disclosures in emergency situations.

Renee Dustman
Follow me

Renee Dustman

Executive Editor at AAPC
Renee Dustman, BS, AAPC MACRA Proficient, is an executive editor at AAPC. She holds a Bachelor of Science degree in Media Communications - Journalism. Renee has more than 20 years experience in print production and content management. Follow her on Twitter @dustman_aapc.
Renee Dustman
Follow me

About Has 716 Posts

Renee Dustman, BS, AAPC MACRA Proficient, is an executive editor at AAPC. She holds a Bachelor of Science degree in Media Communications - Journalism. Renee has more than 20 years experience in print production and content management. Follow her on Twitter @dustman_aapc.

Leave a Reply

Your email address will not be published. Required fields are marked *