The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS) issued a new guidance bulletin regarding the use of online tracking technologies (i.e. cookies, web beacons and pixels) by covered entities and business associates under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Under 45 CFR 160.103, a “covered entity” is a health plan, a health care provider, or a health care clearinghouse.

...