U.S. Department of Health and Human Services offers new resources on telehealth privacy and security
The U.S. Department of Health and Human Services (HHS) has released a new resource to assist healthcare providers in educating patients about the privacy and security risks associated with telehealth. The initiative aims to support the continued use of telehealth, which has seen a significant increase since the onset of the COVID-19 pandemic.
In a press release, OCR Director Melanie Fontes Rainer emphasized the value of telehealth in improving healthcare outcomes. Rainer stated, "Telehealth is a wonderful tool that can increase patients' access to health care and improve health care outcomes."
The resource, published by the HHS Office for Civil Rights (OCR), aims to help healthcare entities understand how to offer telehealth services while complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. This comes as a recommendation from the Government Accountability Office to ensure that healthcare providers are well-equipped to explain the possible risks related to privacy and security when using telehealth platforms.
The new resource focuses on educating patients about the privacy and security risks associated with video conferencing websites and apps. While HIPAA regulations do not mandate education on these matters, the information provided by OCR is intended to aid providers in informing patients on how to protect their health information. Protecting the privacy and security of Protected Health Information (PHI) is crucial for effective communication between providers and patients, ultimately improving the quality of care.
In addition to privacy and security, the resource also highlights the need for healthcare providers to comply with civil rights laws. This includes ensuring effective communication for individuals with disabilities and providing language assistance services for those with limited English proficiency.
The resource provides examples of the types of telehealth services that can be offered, such as audio-only calls and video conferencing. It also addresses potential security risks, such as viruses, unauthorized access, and accidental disclosures, along with tips on mitigating these risks.
Overall, the new resource from the HHS aims to support the continued use of telehealth by educating patients about privacy and security risks and promoting effective cybersecurity practices. By doing so, patients can have confidence that their health information remains private while accessing the care they need.
