HHS Issues HIPAA Guidance to Support Audio-Only Telehealth Services

Robinson+Cole Health Law Diagnosis

The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently issued new guidance (Guidance) on the use of remote communication technologies to deliver audio-only telehealth in accordance with HIPAA. Per OCR, the Guidance is intended to ensure continued access for patients to audio-only telehealth in a secure and compliant manner, particularly once OCR’s notification of enforcement discretion (previously discussed here) tied to the COVID-19 pandemic is rescinded (i.e., once the HHS-declared COVID-19 public health emergency is ended).

The Guidance is presented via a series of FAQs with responses from OCR, and notes the important role audio-only telehealth can serve for patients experiencing barriers to in-person care and to video-enabled technologies necessary to access face-to-face telehealth services. First, OCR affirms that HIPAA allows providers (and health plans) to utilize remote communications technologies to deliver audio-only telehealth, and reminds providers that they are expected to deliver “telehealth services in private settings to the extent feasible.” OCR also indicates that covered entities are obligated to verify the identities of individuals not otherwise known to the entities, either orally or in writing.

Interestingly, in the Guidance OCR states that HIPAA’s security rule does not apply to audio-only telehealth via a ‘landline’ telephone because the information transmitted is not electronic, but it does apply to electronic communication technologies (e.g., those which utilize internet, cellular, and WiFi technologies), and therefore HIPAA security rule safeguards must be utilized for such technologies. OCR also reminds covered entities that a business associate agreement may be required with a communications vendor if, under the arrangement, the vendor is more than a mere conduit of PHI between the entity and the patient. Finally, OCR also confirms that HIPAA permits a provider to utilize remote communication technologies to deliver telehealth services even if the services are not covered or reimbursed by the patient’s health plan.

As providers and regulators prepare to transition out of the COVID-19 public health emergency, this Guidance provides a helpful reminder of HIPAA obligations related to audio-only telehealth, and a confirmation that providers can deliver patient audio-only services to patients in a compliant manner. We expect additional guidance to be forthcoming related to HIPAA and other practice matters significantly affected by COVID-19, and will share thoughts on such guidance as it is released.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Robinson+Cole Health Law Diagnosis | Attorney Advertising

Written by:

Robinson+Cole Health Law Diagnosis

Robinson+Cole Health Law Diagnosis on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.