https://igguru.net/2020/04/03/ocr-announces-notification-of-enforcement-discretion-to-allow-uses-and-disclosures-of-protected-health-information-by-business-associates-for-public-health-and-health-oversight-activities-during-the-c/
OCR Announces Notification of Enforcement Discretion to Allow Uses and Disclosures of Protected Health Information by Business Associates for Public Health and Health Oversight Activities During The COVID-19 Nationwide Public Health Emergency