HHS issues guidance on the use of online tracking tools in healthcare CRM

The U.S. Department of Health and Human Services has issued a bulletin addressing the use of online tracking technologies and the obligations for healthcare organizations under HIPAA’s Privacy, Security, and Breach Notification Rules. The bulletin explains what tracking technologies are, how they are used, and the steps that organizations must take to protect patient health information when using these technologies. It also clarifies that the use of tracking technologies should not result in impermissible disclosures of patient information.