The U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), released a bulletin last week addressing how covered entities (including certain health care providers and employer group health plans) and their business associates must...