The final rule is significant for any organization that is considered to be a HIPAA covered entity (“CE”) (health systems, health care providers, health plans, etc.) or the more broadly defined business associate (“BA”). During our initial analysis of the final rule, we note significant changes to the way a breach is defined and we will be discussing some of those changes during a webinar on January 23, 2013.

There are several ways CEs and BAs can prepare. We have prepared a redlined version of the final rule as a way to help CEs and BAs sift through the changes and prepare for the March 26, 2013 effective date. The Department of Human Services (HHS) Office for Civil Rights (OCR) has referred to these as “sweeping changes” that better enable them to “vigorously” enforce the HIPAA Privacy and Security Rules.

LOADING PDF: If there are any problems, click here to download the file.

Topics:  Business Associates, Covered Entities, Data Protection, Electronic Medical Records, HIPAA, HIPAA Omnibus Rule, HITECH, Medical Records, OCR, Patient Privacy Rights, Personally Identifiable Information, PHI

Published In: Civil Rights Updates, Consumer Protection Updates, Health Updates, Privacy Updates, Science, Computers & Technology Updates

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© BakerHostetler | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »