The US Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recently posted guidance (OCR guidance) clarifying that a business associate such as an information technology vendor ...
OCR originally released this guidance in December 2022, which provided that the HIPAA Rules apply to protected health information (PHI) collected through tracking technologies or disclosed to tracking ...