"This document is to inform the public that four Notifications of Enforcement Discretion issued by [OCR] regarding how the Privacy, Security, and Breach Notification Rules promulgated under [HIPPA and HITECH] will be applied to certain violations during the COVID-19 nationwide public health emergency, will expire upon expiration of the COVID-19 PHE, which is currently scheduled for 11:59 p.m. on May 11, 2023.... OCR will continue to exercise enforcement discretion consistent with the Notifications for violations of the HIPAA Rules that occurred during the period that each Notification was in effect. In addition, OCR is affording covered health care providers a 90-calendar day transition period to come into compliance with the HIPAA Rules with respect to their provision of telehealth using non-public facing remote communication technologies."

MORE >>