Xavier Becerra, Secretary of the Department of Health and Human Services (HHS), declared a public health emergency for Kentucky due to severe storms, flooding, landslides, and mudslides. Correspondingly, he has waived the penalties and sanctions against covered hospitals that do not comply with specific provisions of the HIPAA Privacy Rule including:
- 45 CFR 164.510(b)
- CFR 164.510(a)
- 45 CFR 164.520
- 45 CFR 164.522(a)
- 45 CFR 164.522(b).
View the Limited Waiver issued by the HHS for additional information and considerations including more on HIPAA privacy and disclosures in emergency situations, safeguarding patient information, HIPAA’s application to only covered entities and business associates, and other HIPAA resources.
Limited Waiver of HIPAA Sanctions and Penalties During a Declared Emergency: 2022 Kentucky Flooding
View Limited Waiver
