The CARES Act From a Health CARE Perspective


On March 27, President Trump signed into law the Coronavirus Aid, Relief, and Economic Security Act (the CARES Act or the Act). This $2.2 trillion package is designed to provide relief to those impacted by the COVID-19 crisis. This Advisory provides a high-level summary of key sections of the Act that impact the health care industry. The Act does the following:

Coverage of Diagnostic Testing for COVID-19

Cost of Diagnostic Testing

Clarification Regarding Coverage of COVID-19 Testing Products

Reporting Requirement for Clinical Diagnostic Laboratory Tests

Rapid Coverage of Preventative Services and Vaccines for Coronavirus

Supplemental Awards for Health Centers

Grant Programs for Rural Health Care Services Outreach, Rural Health Network Development, and Small Health Care Provider Quality Improvement

United States Public Health Service Modernization

Limited Liability for Volunteer Health Care Professionals During COVID-19 Emergency Response

  1. The services fall within the scope of the health care professional's licensure;
  2. The services are performed in good faith and the individual being treated requires the services; and
  3. The services are provided in a manner that is not grossly negligent, reckless or while the health care professional is under the influence.

Nutrition Services

Continuity of Services and Opportunities for Participants in Community Service Activities

Reauthorization of Healthy Start Program

Importance of the Blood Supply

Inclusion of Certain Over-the-Counter Medical Products as Qualified Medical Expenses

Improving Care Planning for Medicare Home Health Services

Adjustment of Sequestration

Add-on Payment for COVID-19 Patients Receiving Care at Inpatient Prospective Payment System Hospitals

Increasing Access to Post-Acute Care

  1. Requirement that inpatient rehabilitation facility patients receive at least 15 hours of therapy each week;
  2. Site-neutral payment rate provisions for long-term care hospitals, if the services are provided during the COVID-19 emergency period; and
  3. Payment adjustments for long-term care hospitals that do not have discharge payments of at least 50 percent.

Expansion of the Medicare Hospital Accelerated Payment Program

Health and Human Services Extenders

Revising Payment Rates for Durable Medical Equipment under Medicare

Coverage of the COVID-19 Vaccine Under Medicare Part B Without Cost-Sharing

Requiring Medicare Part D Prescription Drug Plans and Medicare Advantage Plans to Provide Three-Month Supplies of Prescription Drugs

Providing Home and Community-Based Services in Acute Care Hospitals

Clarification Regarding Uninsured Individuals

Delaying Requirements for Enhanced Federal Medical Assistance Percentage

Confidentiality and Disclosure of Records Relating to Substance Use Disorder

  1. Disclosures for treatment, payment and health care operations purposes with written consent; re-disclosure. If written consent is obtained, SUD records may be used or disclosed by a covered entity, business associate or Part 2 program for treatment, payment and health care operations purposes, as permitted by HIPAA regulations, and may be re-disclosed in accordance with HIPAA. An individual's written consent will apply to all future uses or disclosures until revoked in writing.
  2. Restrictions on Disclosures. An individual has a right to request restrictions on the disclosure of SUD records to health plans for payment and health care operations purposes, if the information pertains solely to a health care item or service for which the program has been paid in full.
  3. Disclosure of De-Identified Information to Public Health Authorities. SUD record information may be disclosed without consent to a public health authority if de-identified in accordance with HIPAA's de-identification standard.
  4. Alignment to HIPAA Definitions. The Part 2 Law is amended to incorporate HIPAA definitions of "breach," "business associate," "covered entity," "health care operations," "HIPAA regulations," "payment," "public health authority," "treatment," and "unsecured protected health information."
  5. Prohibiting Use of Records in Proceedings Against Patients Absent Court Order or Patient Consent. SUD records (or testimony of contents therein) may not be used in civil, criminal, administrative or legislative proceedings against a patient by any governmental authority, unless authorized by court order or patient consent, and specifically cannot: (a) be entered into evidence in criminal prosecutions or civil actions; (b) form part of the record for a decision or otherwise be taken into account in government agency proceedings; (c) be used by a governmental agency for law enforcement purposes or investigations; or (d) be used in a warrant application.
  6. Violations Subject to HIPAA Civil and Criminal Penalties. Violations of the Part 2 Law are made subject to the same civil monetary penalties as HIPAA violations and may be enforced by state attorneys general, in addition to the Secretary Of HHS. Certain knowing and willful violations of the Part 2 Law are subject to criminal penalties under the HIPAA criminal statute.
  7. Anti-Discrimination Provisions. Entities are prohibited from discriminating against an individual based on information in SUD records in matters of health care, employment, worker's compensation, housing and government-funded or provided social services and benefits. Recipients of federal funds are prohibited from discriminating against an individual based on information in SUD records in affording access to federally-funded services.
  8. HIPAA Breach Notification Duties. HIPAA breach notification obligations apply to breaches of SUD information to the same extent, and in the same manner, as such provisions apply to a covered entity in the case of a breach of unsecured protected health information.
  9. User-Friendly Notice of Privacy Practices. The Secretary of HHS is required to update HIPAA's notice of privacy practice regulations to require covered entities and entities creating or maintaining SUD records to provide an easily understandable notice of privacy practices with regard to SUD records.
  10. No Limit on Patient's Right to Request Restrictions. The amendments do not limit (a) a patient's right to request restrictions on uses or disclosures of the patient's SUD records for purposes of treatment, payment or health care operations; or (b) a covered entity's choice to obtain consent to use or disclose a SUD record to carry out treatment, payment or health care operations.
  11. "Sense of Congress" Statement. Congress notes that: (a) providers treating patients in Part 2 programs are encouraged to access the state prescription drug monitoring database where clinically appropriate; (b) SUD patients have a right to request restrictions on disclosures of SUD records for treatment, payment and health care operations, and covered entities should attempt to accommodate such restrictions where feasible; (c) in applying the definition of health care operations [presumably to SUD programs], the definition should exclude the creation of de-identified information or limited data sets and fundraising; and (d) Part 2 programs should be incentivized to discuss with patients the benefits of consenting to the sharing of SUD records.

Guidance on Protected Health Information

Temporary Waiver of Requirement for Face-to-Face Visits Between Home Dialysis Patients and Physicians

Encouraging Use of Telecommunications Systems

Telehealth Network and Telehealth Resource Center Grant Provisions

Exemption for Telehealth Services

Increasing Medicare Telehealth Flexibilities

Enhancing Medicare Telehealth Services for Federally Qualified Health Centers and Rural Health Clinics

Use of Telehealth for Face-to-Face Encounters Prior to Recertification of Eligibility for Hospice Care


©2025 Katten Muchin Rosenman LLP
National Law Review, Volume X, Number 91