HHS allows health information sharing during COVID-19 emergency

To support federal public health authorities and agencies in need of COVID-19-related data, the Health and Human Services Office for Civil Rights will not penalize health care providers or their business associates for violations of certain HIPAA provisions.

HHS said good faith uses and disclosures of protected health information to the Centers for Disease Control and Prevention, Centers for Medicare & Medicaid Service, state and local health departments, and state emergency operations centers will help with the exchange of information to flatten the curve. Current regulations allow a HIPAA business associate to use and disclose protected health information for public health and health oversight purposes only if expressly permitted by its business associate agreement with a HIPAA covered entity