HIPAA Disclosures to First Responders & Public Health Authorities: COVID-19

The following information has been provided for informational purposes only and does not serve as legal advice. Please consult your attorney.

 

March 27, 2020
On March 25, 2020, the U.S Department of Health and Human Services Office for Civil Rights (“OCR”) issued guidance for covered entities regarding disclosing protected health information (“PHI”) to law enforcement, paramedics, other first responders, and public health authorities during the COVID-19 health emergency.
The guidance explains that, under certain circumstances, a covered entity may disclose the name or other identifying information of an individual who has been infected with, or exposed to, COVID-19 with law enforcement, paramedics, other first responders, and public health authorities without an individual’s authorization without violating the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Privacy Rule. Permitted circumstances for disclosure include:
  1. When the disclosure is needed to provide treatment.
  2. When the notification is required by law.
  3. To notify a public health authority in order to prevent or control spread of disease.
  4. When first responders may be at risk of infection.
  5. When the disclosure of PHI to first responders is necessary to prevent or lessen a serious and imminent threat to the health and safety of a person or the public.
  6. When responding to a request for PHI by a correctional institution or law enforcement official having lawful custody of an inmate or other individual, if the facility or official represents that the PHI is needed for:
  • providing health care to the individual;
  • the health and safety of the individual, other inmates, officers, employees and others present at the correctional institution, or persons responsible for the transporting or transferring of inmates;
  • law enforcement on the premises of the correctional institution; or
  • the administration and maintenance of the safety, security, and good order of the correctional institution.
The guidance reiterates that, except when required by law, or for treatment disclosures, a covered entity must make reasonable efforts to limit the information used or disclosed to that which is the “minimum necessary” to accomplish the purpose for the disclosure.
For more information and further guidance, the full press release is available here. As always, we are available to advise and assist you at every turn. Please do not hesitate to reach out to us with any questions.
Weaver Johnston & Nelson, PLLC
10440 N. Central Expressway, Suite 1400
Dallas, Texas 75231
Phone: (214) 705-3515
Ashley E. Johnston
Phone: (214) 763-8296
Board Certified – Health Law
Texas Board of Legal Specialization
Joshua M. Weaver
Phone: (214) 705-3516
Board Certified – Health Law
Texas Board of Legal Specialization
Joseph E. Nelson
Phone: (214) 705-3907
Board Certified – Health Law
Texas Board of Legal Specialization
Steve Litke
Phone: (972) 427-7685
Chris Reed
Phone: (214) 705-3935
Kevin Mitchell
Phone: (469) 680-9049
Shannon Cahalan
Phone: (214) 938-9898
Stephanie Toth
Phone: (469) 480-9729
Rachael Nelson Gearing
Phone: (469) 680-9609
Vicki Wanjura
Phone: (214) 587-6026
Paul Wehrmann
Phone: (214) 957-0919