HIPAA: Say Goodbye to These 4 Enforcement Discretions

Why This Topic Matters

Organizations that relied on temporary HIPAA enforcement relief need to understand when those flexibilities end so they can update policies, workflows, and telehealth operations appropriately.

Article Sections

1. Background on OCR enforcement discretions

   Introduces the end of the COVID-19 public health emergency and the related OCR enforcement changes. Provides context for why temporary HIPAA and HITECH flexibilities are expiring.

2. Pocket These Details About the 4 Notifications

   Provides an overview of the four temporary notifications of enforcement discretion and the general areas they addressed. Summarizes the affected settings and the timing of their expiration.

3. Get ready for these changes for testing sites

   Discusses temporary relief connected to COVID-19 testing sites and the types of organizations involved. Includes reference information for the underlying federal notice.

4. Understand the telehealth updates — and transition option

   Covers the telehealth-related enforcement discretion and the post-PHE transition period described by OCR. Notes the continued operational focus on telehealth compliance.

5. Know the use and disclosure of PHI updates

   Reviews temporary guidance related to information exchange during the public health emergency. Describes the general public health and oversight context for the policy.

6. Here’s how vaccination scheduling changes

   Summarizes temporary relief tied to web-based scheduling for COVID-19 vaccination appointments. Identifies the general compliance area affected by the notification.

7. Bottom line

   Wraps up with the need to update policies and procedures as the temporary flexibilities end. Directs readers to OCR and Federal Register materials for additional context.