OCR issues guidance on disclosing COVID-19 patient information

The Office for Civil Rights (OCR) at the Department of Health and Human Services (HHS) issued guidance on how covered entities may disclose protected health information (PHI) to prevent the spread of COVID-19. According to the guidance, organizations subject to Health Insurance Portability and Accountability Act rules may share PHI to inform first responders and others they should take precautions to avoid infection. The guidance reminds covered entities they must “make reasonable efforts to limit the information used or disclosed ... to that which is the ‘minimum necessary’ to accomplish the purpose for the disclosure.” (HHS news release, 3/24/20)