
The Department of Health and Human Services’ revised “bulletin” for HIPAA covered entities and business associates using online tracking technologies only confirms that the original bulletin was “substantively and procedurally unlawful,” AHA April 11 told a federal court hearing its challenge to a bulletin issued by HHS’ Office for Civil Rights that restricts health care providers from using standard third-party web technologies that capture IP addresses on portions of their public-facing webpages.