The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued guidance on how the HIPAA Privacy Rule permits health care providers to contact their patients who have recovered from COVID-19, to inform them how they can donate their blood and plasma containing antibodies to help other patients with COVID-19.

The guidance emphasizes that without patients’ authorization, health care providers cannot receive any payment from or on behalf of a blood and plasma donation center in exchange for such communications with recovered patients.

To read the full guidance:

OCR GUIDANCE FOR HEALTH CARE PROVIDERS CONTACTING FORMER COVID-19 PATIENTS

Security and compliance are first and foremost in the management of our clients' systems. After conducting thousands of SRAs, common vulnerabilities began to emerge. We launched HIPAA Tip Tuesday to make clients aware of what actions they can take to address these vulnerabilities.

Have a great week!