The Office for Civil Rights at the U.S. Department of Health and Human Services has issued new guidance on how HIPAA-covered entities can provide audio-only telehealth services. The guidance aims to ensure that the use of remote communication technologies for telehealth services complies with HIPAA’s Privacy, Security, and Breach Notification Rules. It also clarifies that audio-only virtual care can be provided without a business associate agreement with the vendor. The goal is to improve public confidence in the protection of health information.

Apple issues mercenary spyware threat notifications
Apple has sent threat notifications to certain individuals it suspects may have been targeted by mercenary spyware attacks.