The Office for Civil Rights at the U.S. Department of HHS issued guidance on how the Health Insurance Portability and Accountability Act of 1996 permits covered entities and their business associates to use HIEs to disclose protected health information for the public health activities of a public health authority.