Community-Based Testing Sites are the latest entity to be excluded from HIPAA enforcement penalties by the OCR for their participation in regard to COVID-19 specimen collection and testing.