The U.S. Department of Health and Human Services has issued a bulletin highlighting obligations to entities and business partners that are protected under the Privacy, Security, and Breach Notices of the U.S. Code of Conduct. HIPAA when using online tracking technologies.
These tracking tools have raised some concerns about patient data security and have resulted in several class-action lawsuits, creating new challenges for healthcare organizations.
In a news release, HHS covers how online tracking technologies, such as Google Analytics or Meta Pixel, collect and analyze information about how internet users interact with our websites or mobile applications. an entity administered by HIPAA.
“Regulated entities are not permitted to use tracking technologies in a manner that would result in the disclosure of ePHI to tracking technology providers or any other violation of the HIPAA Code of Conduct,” the agency said. this said.
The bulletin explains what tracking technologies are, how they are used, and the steps healthcare organizations and others must take to protect protected health information when using it. using HIPAA tracking technologies.
Specifically, the Newsletter provides insight and examples on:
- Follow up on websites.
- Tracking in mobile apps.
- HIPAA compliance obligations for regulated entities when using tracking technology.
The HHS bulletin clarifies that the notice to use pixels for the organization’s customer relationship management activities does not authorize the disclosure of PHI. It also provides guidance on when a HIPAA compliance authorization is required.
Furthermore, it is “not enough” for tracking technology vendors to be accused of removing or de-identifying PHI, the agency said.
“Providers, health plans, and HIPAA-regulated organizations, including technology platforms, must comply with the law,” said Melanie Fontes Rainer, Director of the HHS Office for Civil Rights. that is, consider the risks to patient health information when using tracking technologies”.
“Our newsletter answers questions for people who use tracking technology, importantly, how to protect the privacy and security of the health information they hold.”
Andrea Fox is the senior editor of Healthcare IT News.
Email: [email protected]
Healthcare IT News is a publication of HIMSS.
Brought to you by Canon Medical
