The Office for Civil Rights (OCR) expects healthcare providers will provide telehealth services in private settings, such as a provider in a clinic or office. Providers should always use private locations and patients should not receive telehealth services in public settings unless the patient gives consent or due to urgent circumstances.
If telehealth cannot take place in a private setting, covered health care providers should continue to follow reasonable HIPAA safeguards. Some examples of these precautions include using lowered voices, no speakerphone, or asking the patient to move to a more private location when discussing Protected Health Information (PHI).