This week OCR announced that the Notifications of Enforcement Discretion that was issued under the public health emergency will expire on May 11, 2023. This potentially means changes to telehealth processes that many heath care organizations have been utilizing since 2020. OCR will continue to support the use of telehealth, but HIPAA Rules will go back into full effect. After May 11th, all telehealth appointments must be conducted in a “private and secure manner in compliance with the HIPAA Rules.”
OCR is granting a 90-day grace period to ensure organizations have time to get the proper processes in place. The 90-day grace period will end August 9th, 2023.
