The U.S. Department of Health & Human Services Office of Civil Rights (OCR) has modified a Final Rule updating the HIPAA Privacy Rule. This rule prohibits the use or disclosure of reproductive protected health information (PHI) by covered entities and their business associates.