An official website of the United States government
Here’s how you know
Official websites use .gov A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
HHS Office for Civil Rights Issues Resources for Health Care Providers and Patients to Help Educate Patients about Telehealth and the Privacy and Security of Protected Health Information
Today, the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS), issued two resource documents to help explain to patients the privacy and security risks to their protected health information (PHI) when using telehealth services and ways to reduce these risks.
The first resource is for health care providers on “Educating Patients about Privacy and Security Risks to Protected Health Information when Using Remote Communication Technologies for Telehealth.” Although health care providers are not required by the HIPAA Rules to provide this education, the resource supports the continued and increased use of telehealth by providing information to help health care providers who choose to discuss telehealth privacy and security with patients. The resource provides suggestions for discussing:
Telehealth options offered
Risks to PHI when using remote communications technologies
Privacy and security practices of remote communication technology vendors
Applicability of civil rights laws
OCR also issued a resource for patients called “Telehealth Privacy and Security Tips for Patients.” This resource provides recommendations that patients can implement to protect and secure their health information such as:
Conduct telehealth appointment in a private location
Turn on multi-factor authentication if available
Use encryption when available
Avoid public Wi-Fi networks
“Telehealth is a wonderful tool that can increase patients’ access to health care and improve health care outcomes,” said OCR Director Melanie Fontes Rainer. “Health care providers can support telehealth by helping patients understand privacy and security risks and effective cybersecurity practices so patients are confident that their health information remains private.”
For general media inquiries, please contact media@hhs.gov.
Content created by Assistant Secretary for Public Affairs (ASPA) Content last reviewed
Disclaimer Policy: Links with this icon () mean that you are leaving the HHS website.
The Department of Health and Human Services (HHS) cannot guarantee the accuracy of a non-federal website.
Linking to a non-federal website does not mean that HHS or its employees endorse the sponsors, information, or products presented on the website. HHS links outside of itself to provide you with further information.
You will be bound by the destination website's privacy policy and/or terms of service when you follow the link.
HHS is not responsible for Section 508 compliance (accessibility) on private websites.
For more information on HHS's web notification policies, see Website Disclaimers.