Although many believe the HIPAA rules already allow for disclosure of COVID-19 cases on the basis of a public emergency, OCR just issued Guidance, attached in the link below, confirming disclosure is permitted when needed to provide treatment, with the notification is required by law and in order to prevent or control the spread of a disease or prevent or lessen and imminent threat to public safety.
