HHS’s Office for Civil Rights (OCR) issued guidance clarifying that, generally, HIPAA permits a covered health care provider to use protected health information (PHI) to identify and contact patients who have recovered from COVID-19 to provide them with information about donating blood and plasma that could help other COVID-19 patients.