By John Fisher, JD, CHC, CCEP

Safeguarding Patient Health Information in an Emergency Situation

Even in an emergency situation such as that presented by the COVID-19 pandemic, covered entities must continue to meet their obligations under federal and state laws protecting confidentiality of patient health care information, to implement reasonable safeguards to protect patient information against intentional or unintentional impermissible uses and disclosures. They must continue to comply with the administrative, physical, and technical safeguards of the security rule and privacy rule of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

The obligation to conduct periodic HIPAA security assessments continues, even during the existence of an emergency or natural disaster. The obligation to meet the requirements of state laws protecting special status health information such as mental health records and drug and alcohol rehabilitation records, also continues through a pandemic.

Each of the bodies of regulations that apply to patient health information contain certain specific provisions that can apply during a pandemic. For example, HIPAA permits disclosures to public health authorities and others

Read more here: Health Law Blog