OCR originally released this guidance in December 2022, which provided that the HIPAA Rules apply to protected health information (PHI) collected through tracking technologies or disclosed to tracking ...
The original version of the guidance addressed impermissible disclosures of protected health information (“PHI”) by regulated entities to online technology tracking vendors. Under HIPAA, PHI is ...