The U.S. Department of Health and Human Services’ Office for Civil Rights has settled with New York-based Saint Joseph’s Medical Center for potential violations of the Health Insurance Portability and Accountability Act of 1996 Privacy Rule. The settlement involved the impermissible disclosure of COVID-19 patients’ protected health information to a national media outlet.