HIPAA Omnibus Final Rule Released


The HHS Office for Civil Rights (OCR) released the long-awaited HIPAA Omnibus Final Rule on January 17, 2013.  The Omnibus Final Rule modifies:

  • The HIPAA Privacy, Security, and Enforcement Rules to implement statutory requirements of the HITECH Act;
  • The rule governing Breach Notification for Unsecured Protected Health Information to address comments received on the interim final rule; and
  • The HIPAA Privacy Rule as required by the Genetic Information Nondiscrimination Act.

In addition, OCR has included certain other modifications to these rules to improve their workability and effectiveness and to increase flexibility for and decrease the burden on regulated entities. 

The Omnibus Final Rule becomes effective on March 26, 3013, but covered entities and business associates have until September 23, 2013, to comply (with certain transition provisions for existing business associate agreements).  The text of the Final Rule, which will be published in the January 25, 2013 Federal Register, is available by clicking here.  Stay tuned for a King & Spalding Client Alert regarding the Final Rule to be released this week. 

Reporter, Susan Banks, Washington, D.C., +1 202 626 2953, sbanks@kslaw.com.

Written by:

Published In:


DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© King & Spalding | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »

All the intelligence you need, in one easy email:

Great! Your first step to building an email digest of JD Supra authors and topics. Log in with LinkedIn so we can start sending your digest...

Sign up for your custom alerts now, using LinkedIn ›

* With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name.