The deputy director of health information privacy for the Health and Human Protection Department 's Office for Health Rights ( OCR ) has said that the Health Insurance Portability and Accountability Act ( HIPAA ) does not cover all health information and may sometimes , but not always , apply to health apps that share data with electronic health devices . To address the issue whether and when apps are subject to HIPAA 's privacy and security requirements , the OCR provides a portal for developers and others to ask questions anonymously .
The deputy director of health information privacy for the Health and Human Services Department's Office for Civil Rights (OCR) has said that the Health Insurance Portability and Accountability Act (HIPAA) does not cover all health information and may sometimes, but not always, apply to health apps that exchange data with electronic health records. To address the confusion whether and when apps are subject to HIPAA's privacy and security requirements, the OCR launched a portal for developers and others to ask questions anonymously.