Introduction
In a rapidly evolving healthcare landscape, telehealth has emerged as a valuable tool, providing patients with easier access to medical care and improving healthcare outcomes. Recognizing the importance of telehealth and the need to safeguard patients’ privacy and security, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) has released two crucial resource documents. These resources aim to educate healthcare providers and patients on the privacy and security of protected health information (PHI) in telehealth.
Resource for Healthcare Providers
The first resource, titled “Educating Patients about Privacy and Security Risks to Protected Health Information when Using Remote Communication Technologies for Telehealth,” is designed to assist healthcare providers in informing patients about the potential risks associated with using telehealth services. While HIPAA Rules do not mandate the provision of this education, it is a proactive step that supports the expanded use of telehealth.
This comprehensive resource offers guidance to healthcare providers on:
- Telehealth Options: Explaining the telehealth services available to patients.
- Risks to PHI: Highlighting the potential privacy and security risks associated with remote communication technologies.
- Vendor Practices: Discussing the privacy and security practices of remote communication technology vendors.
- Civil Rights Laws: Explaining the applicability of civil rights laws in telehealth.
Resource for Patients
The second resource, “Telehealth Privacy and Security Tips for Patients,” empowers patients with the knowledge and tools to protect and secure their health information when using telehealth services. It provides practical recommendations for patients to follow, including using private and secure locations, enabling multi-factor authentication, using encryption, and avoiding public Wi-Fi networks.
Melanie Fontes Rainer, OCR Director, underscores the significance of these resources, stating, “Healthcare providers can support telehealth by helping patients understand privacy and security risks and effective cybersecurity practices so patients are confident that their health information remains private.”
Links
Visit the guidance documents for more details.
