- FAQs discussing HIPAA's impact on DPH Bureaus and programs.
- CDC discussion of the Privacy Rule and Public Health.
Because HIPAA is a federal statute, it is interpreted and enforced by the Department of Health and Human Services' Office of Civil Rights, and the Centers for Medicare & Medicaid Services. The Department of Public Health neither interprets nor enforces HIPAA, and is required like all other holders of protected health information, including both private and public entities, to analyze and determine HIPAA's application to our own business practices. The Department cannot provide entities with legal or technical assistance regarding their status under HIPAA, or with the steps that must be taken to comply with HIPAA. However, the Department will address questions that relate to an individual's or organization's interaction with DPH under the HIPAA requirements, or to DPH's hybrid entity status. Questions should be referred to (617) 624-5194 or emailed to the Privacy and Data Access Office .