COVID-19 Resources for Health Care Professionals: Office for Civil Rights (OCR) HIPAA Guidance

Wilentz Health Law Check Up


On March 17, 2020, the Office for Civil Rights (OCR) announced the Notification of Enforcement Discretion for Telehealth Remote Communications during the COVID-19 Nationwide Public Health Emergency. 

In February 2020, the OCR at the U.S. Department of Health and Human Services (HHS) provided a bulletin to assist entities in determining the appropriate way in which patient information could be permissibly shared in compliance with HIPAA in the event of an outbreak of infectious disease or other emergency situations.  OCR has outlined several ways by which the HIPAA Privacy Rule permits entities to disclose PHI without a patient’s authorization.

  • Covered entities may disclose PHI about the patient as necessary to treat the patient or to treat a different patient.
  • Covered entities may disclose requested PHI to a public health authority, a foreign government agency (at the direction of a public health authority) that is collaborating with the public health authority, and persons at risk of contracting or spreading a disease or condition if authorized by law.
  • Covered entities may share PHI with a patient’s family, friends, relatives, or other persons identified that were involved in the patient’s care.
  • Health care providers may share PHI with anyone in order to prevent or lessen a serious and imminent threat to the public health and safety.

Health care providers are required to comply with the “minimum necessary” standard when disclosing PHI of patients with the coronavirus, which means that such providers must make reasonable efforts to disclose only the patient information necessary to achieve the purpose of the disclosure.  In addition, during emergencies, covered entities must implement reasonable safeguards to protect PHI against any “intentional or unintentional uses and disclosures” in violation of HIPAA. For more information visit: NIH BULLETIN: HIPAA Privacy and Novel Coronavirus.

If you are a health care provider with any questions regarding this COVID-19 outbreak, please contact Grace Mack or any member of the Health Law Team.


The postings on this blog were created for general informational purposes only and do not constitute legal advice or a solicitation to provide legal services.  Although we attempt to ensure that the postings are complete, accurate, and current as of the time of publication, we assume no responsibility for their completeness, accuracy, or timeliness.  The information in this blog is not intended to create, and receipt of it does not constitute, a lawyer-client relationship.  Readers should not act upon this information without seeking professional legal counsel.

This blog may contain links to independent third party websites and services, including social media. We provide these links for your convenience, and you access them at your own risk.  We have no control over and do not monitor the content or policies (including privacy policies) of these third-party websites and have no responsibility for, and no liability with respect to, their content, accuracy, or reliability.  Unless expressly stated, we do not endorse any of the linked websites or any product, service, or publication referenced herein or therein.  We will remove a link to any site from this blog upon request of the linked entity.

We grant permission to readers to link to this blog so long as this blog is not misrepresented. This site is not sponsored or associated with any other site unless so identified.

If you wish for Wilentz, Goldman & Spitzer, P.A., to consider representing you, please obtain contact information from the Contact Us area of this blog or go to the firm’s website at  One of our lawyers will be happy to discuss the possibility of representation with you. However, the authors of Wilentz blogs are licensed only in New Jersey and/or New York and do not wish to represent anyone who viewed this site in a state where the site fails to comply with all laws and ethical rules of that state.

Thank you for your interest in Wilentz, Goldman & Spitzer P.A.’s legal blogs. You will receive an email sent to the address entered in order to confirm your subscription. Please watch for it and click the link to confirm your subscription.