The US Department of Health and Human Services (HHS) issued a guidance on providing audio-only telehealth services that are compliant with the Health Insurance Portability and Accountability Act of 1996 (HIPAA)—even when the COVID-19 public health emergency enforced by the HHS Office for Civil Rights (OCR) expires. HHS’ guidance offers direction on how to use remote communication technologies in ways that conform to HIPAA’s privacy, security, and breach notification rules.