OCR’s HIPAA Bulletin - What it means for healthcare marketers (a legal POV)

Is your team scrambling trying to figure out how to make your marketing analytics setup HIPAA-compliant with the new bulletin? Yep, everyone else is too. Today, attorney Drew Westbrook joins the show to discuss the bulletin released by OCR in December 2022. In the bulletin, OCR expanded the definition of what information is protected under HIPAA beyond what most people have read in the law and completely changes the understanding of how marketers can and can’t use analytics tools as part of our toolset, including web analytics and call tracking. Drew explains the biggest points of concern with the new bulletin, including IP addresses being identified as PHI under HIPAA. We then shift the conversation to what healthcare marketers need to do to understand if their organization is at risk. Auditing data to understand the information being collected, where it is being collected from, and where it is going is a good first step. They also touch on state-specific legislation and if there is any real difference in data handling of covered and non-covered entities. This (episode 16) is part one of a two-part series (episode 17) Find out more about Drew here Connect with Jenny on LinkedIn Explore what Hedy and Hopp can do for you