HHS OCR Waives HIPAA Penalties for COVID Vaccines
HHS OCR will not impose penalties against covered entities or their business associates that use online and web-based scheduling applications WBSAs that are not HIPAA compliant, when the WSBAs are used for scheduling individual appointments for COVID-19 vaccinations.
Source: natlawreview.com