May 28, 2020

May 28, 2020

Subscribe to Latest Legal News and Analysis

May 27, 2020

Subscribe to Latest Legal News and Analysis

May 26, 2020

Subscribe to Latest Legal News and Analysis

HHS Waives HIPAA Penalties for Operation of a Community-Based COVID-19 Testing Site

On April 9, 2020 the Department of Health & Human Services Office for Civil Rights (OCR) issued another Notification that it will exercise its enforcement discretion and not impose penalties for HIPAA violations in connection with good faith participation in the operation of COVID-19 testing sites during the COVID-19 emergency.

The Notification is intended to help covered entities (such as pharmacies) and their business associates who participate in a Community-Based Testing Site (CBTS) providing only COVID-19 testing services or specimen collection (e.g., via a mobile, walk-up or drive-through setup). In the Notification, OCR encourages covered health care providers and business associates to implement reasonable privacy and security safeguards related to CBTS, including by adhering to HIPAA’s minimum necessary requirements, setting up canopies or similar barriers to provide privacy during testing, controlling car and foot traffic to establish adequate distancing and prevent incidental disclosures, and posting a Notice of Privacy Practices (NPP) or information on how to find the NPP online, in a readily accessible location for individuals at the CBTS.

A complete list of Notifications and other guidance issued by OCR related to COVID-19 response efforts is available here.

Copyright © 2020 Robinson & Cole LLP. All rights reserved.


About this Author

Conor Duffy Cybersecurity Attorney

Conor Duffy is a member of the firm's Health Law Group and its Data Privacy + Cybersecurity Team. He advises hospitals, physician groups, community providers, and other health care entities on general corporate matters and health law issues. He also counsels clients on what measures are needed to safeguard data and patient information.


Conor provides legal counsel to health care clients on various regulatory matters, such as Medicare and Medicaid program compliance, federal fraud and abuse laws, and the Emergency Medical Treatment & Labor Act...