The Office for Civil Rights of the Department of Health and Human Services recently released its final rule (the "Rule") modifying the Health Insurance Portability and Accountability Act ("HIPAA") and implementing the statutory requirements of the Health Information Technology for Economic and Clinical Health Act (“HITECH”). (The Rule was originally expected to be released in February of 2010 when HITECH became effective.) In short, the Rule: modifies HIPAA’s privacy, security and enforcement rules; changes HIPAA’s enforcement rules to increase penalties consistent with HITECH; provides a final rule on breach notification; and modifies HIPAA as required by the Genetic Information Nondiscrimination Act.
The new rule is approximately 563 pages and can be accessed here. If you have any questions about how the Rule may impact your health care practice, please contact Nicole Stratton at (517) 371-8140 or by using the form below.