The recent Ebola outbreak has prompted the HHS Office for Civil Rights (OCR) to release a new bulletin for covered entities and business associates regarding their privacy obligations under HIPAA in emergency situations. The bulletin, “HIPAA Privacy In Emergency Situations,” provides an overview of the limited ways in which covered entities and business associates may use and disclose protected health information in emergencies, such as the Ebola outbreak.
