HIPAA Q&A: Vendor risk management, reproductive health care, and telehealth

Why This Topic Matters

Organizations need to track evolving HIPAA expectations across vendors, reproductive health information, and telehealth delivery. This piece helps readers identify the compliance areas affected and the policy, training, and oversight domains that may require review.

Article Sections

1. Vendor risk management under the HIPAA Security Rule

   Discussion of vendor oversight considerations in the context of HIPAA Security Rule expectations and federal cybersecurity guidance. The section focuses on how organizations think about third-party risk management across different types of service relationships.

2. Proposed HIPAA Privacy Rule changes for reproductive health care

   Overview of proposed privacy rulemaking related to reproductive health information and related definitions. The section also covers notice, disclosure, and policy-update implications for covered entities and business associates.

3. Telehealth compliance after the COVID-19 public health emergency

   Summary of post-PHE telehealth compliance considerations, including privacy, security, and contractual topics. The section addresses how organizations may need to review telehealth operations and related safeguards.