HHS puts out new notice on audio-only telehealth and HIPAA

The Office for Civil Rights at the U.S. Department of Health and Human Services has issued new guidance on how HIPAA-covered entities can provide audio-only telehealth services. The guidance aims to ensure that the use of remote communication technologies for telehealth services complies with HIPAA’s Privacy, Security, and Breach Notification Rules. It also clarifies that audio-only virtual care can be provided without a business associate agreement with the vendor. The goal is to improve public confidence in the protection of health information.