Skip to main content
Rural Health Information Hub

Rural Health
Resources by Topic: Patient privacy

Preserve Telehealth Access Act of 2021: Telehealth Recommendations
Offers policy recommendations related to Maryland's Preserve Telehealth Access Act of 2021, including recommendations related to provider options to deliver care via telehealth, audio-visual and audio-only delivery, remote patient monitoring, hospice care services, inpatient care, patient privacy, and reimbursement levels.
Author(s): Randolph S. Sergent, Ben Steffen
Date: 12/2022
Type: Document
Sponsoring organization: Maryland Health Care Commission
view details
Safety Assurance Factors for EHR Resilience (SAFER) Guides Requirements
Infographic displaying the differences in the Safety Assurance Factors for EHR Resilience (SAFER) Guide requirements for hospitals and Critical Access Hospitals (CAHs) participating in the Medicare Promoting Interoperability Program and eligible clinicians participating in the Merit-based Incentive Payment System (MIPS) Promoting Interoperability performance category for eligible clinicians.
Date: 10/2022
Type: Document
Sponsoring organization: Centers for Medicare and Medicaid Services
view details
Medicare Telehealth: Actions Needed to Strengthen Oversight and Help Providers Educate Patients on Privacy and Security Risks
Analyzes 2019 and 2020 Medicare claims data to explore the utilization of telehealth services before and after the implementation of regulatory flexibilities and waivers in March 2020 in response to the COVID-19 pandemic. Describes efforts taken by the Centers for Medicare & Medicaid Services (CMS) to identify and monitor risks posed by Medicare telehealth waivers, as well as a change made to the enforcement of regulations governing patients' protected health information during the COVID-19 public health emergency. Offers three recommendations to CMS to strengthen oversight and assess the quality of telehealth services and one recommendation regarding assistance to providers to explain the privacy and security risks of telehealth to patients.
Additional links: Full Report
Date: 09/2022
Type: Document
Sponsoring organization: Government Accountability Office
view details
The IHS Telehealth System Was Deployed Without Some Required Cybersecurity Controls
Presents findings of an audit to determine whether the Indian Health Service (IHS) implemented select cybersecurity system controls prior to deploying its telehealth system nationally. Offers policy recommendations to the IHS for improving the implementation of cybersecurity controls for new information systems and remediating known vulnerabilities that may impact telehealth technologies.
Date: 09/2022
Type: Document
Sponsoring organization: Office of Inspector General (HHS)
view details
The Use of Telehealth for Disability Evaluation in Medicine and Allied Health: Proceedings of a Workshop
Summarizes presentations and discussions held during a March 2022 workshop regarding the use of telehealth for patient evaluation. Provides an overview of telehealth policy broadly and within the context of the COVID-19 pandemic. Explores the use of telehealth in a range of clinical specialties; telehealth access and digital inclusion and equity; the experiences of U.S. healthcare systems in deploying telehealth; and licensure, privacy, and security issues.
Additional links: Read Online
Author(s): Board on Health Care Services
Date: 2022
Type: Document
Sponsoring organization: Health and Medicine Division (HMD), National Academies of Sciences, Engineering, and Medicine
view details
New HIPAA Privacy Rule: What RHCs Need To Know
Recording of a January 27, 2021, webinar providing information about proposed and existing Health Insurance Portability and Accountability Act of 1996 (HIPAA) compliance rules affecting Rural Health Clinics (RHCs). Covers individual right of access to protected health information (PHI), fees for health records, patient identification verification, third party disclosures, and clarification of healthcare operations including care coordination and case management. Discusses proposed PHI changes regarding substance use disorders and serious mental illness, and changes in notice of privacy practices (NPP) requirements. Includes a fee calculator for medical record requests. Part of the Rural Health Clinic Technical Assistance Series.
Additional links: HIPAA Record Fee Calculator, Presentation Slides, Q&A, Transcript
Date: 01/2021
Type: Video/Multimedia
Sponsoring organization: National Association of Rural Health Clinics
view details
Notification of Enforcement Discretion for Telehealth Remote Communications During the COVID-19 Nationwide Public Health Emergency
Discusses the enforcement discretion that the HHS Office of Civil Rights (OCR) will use during to the COVID-19 nationwide public health emergency related to Health Insurance Portability and Accountability Act of 1996 (HIPAA) requirements. Explains that OCR will not impose penalties for noncompliance with the regulatory requirements under the HIPAA Rules against covered healthcare providers in connection with the good faith provision of telehealth during the public health emergency. Identifies applications that can be used and those that should not be used.
Date: 01/2021
Type: Document
Sponsoring organizations: HHS Office for Civil Rights, U.S. Department of Health and Human Services
view details
OCR Update on HIPAA and COVID-19
Recording of an April 24, 2020, webinar on HIPAA privacy and health information technology security issues related to COVID-19. Discusses several U.S. Department of Health and Human Services Office of Civil Rights actions during the pandemic, including notifications of enforcement discretion and guidance for telehealth remote communications, first responders and public health authorities, and other stakeholders.
Date: 04/2020
Type: Video/Multimedia
Sponsoring organization: U.S. Department of Health and Human Services Office of Civil Rights
view details
Intergovernmental Advisory Committee to the Federal Communications Commission Advisory Recommendation No: 2019-2 in the Matter of State, Local Tribal, and Territorial Regulatory and Other Barriers and Incentives to Telemedicine
Examines the technical infrastructure necessary for effective telemedicine delivery in state, territorial, tribal, and local (rural and urban) areas. Discusses the regulatory barriers including legislation, licensing, reimbursement, malpractice insurance, and privacy that obstruct its development and utilization, and offers recommendations addressing these barriers. Appendix A presents case studies of broadband and telehealth development in several states and territories.
Date: 11/2019
Type: Document
Sponsoring organizations: Federal Communications Commission, Intergovernmental Advisory Committee to the Federal Communications Commission
view details
Infectious Diseases Society of America Position Statement on Telehealth and Telemedicine as Applied to the Practice of Infectious Diseases
Position statement to educate members of the Infectious Diseases Society of America on telehealth and to promote use of this technology in clinical care, research, and education. Explores the potential to increase access to subspecialist care in rural areas, and describes reimbursement policies of private insurers, Medicare, and Medicaid, for telehealth services provided to patients in rural areas. Also describes HIPAA requirements for telehealth interactions and protected health information.
Author(s): Jeremy D. Young, Rima Abdel-Massih, Thomas Herchline, et al.
Citation: Clinical Infectious Diseases, 68(9), 1437-1443
Date: 05/2019
Type: Document
view details