On December 10, 2020, the Department of Health and Human Services (HHS) announced proposed revisions to the HIPAA Privacy Rule. HHS stated that the revisions would “address standards that may impede the transition to value-based health care by limiting or discouraging care coordination and case management communications among individuals and covered entities (including hospitals, physicians, and other health care providers, payors, and insurers) or posing other unnecessary burdens.”
The Notice of Proposed Rulemaking (NPRM) sets forth significant changes that would impact day-to-day operations of HIPAA covered entities and require revisions to numerous policies and procedures of covered entities. The revisions in the NPRM largely stem from the public input received in response to the Request for Information on Modifying HIPAA Rules to Improve Coordinated Care issued in 2018.
Highlights of the proposed revisions include:
Right of access
Notice of Privacy Practices
Health care operations / Care coordination and case management
Disclosures to avert a threat to health or safety
Public comments on the proposed rule will be due 60 days after the NPRM is published in the Federal Register.