Somewhat lost in the American Recovery and Reinvestment Act of 2009 (“ARRA”), among the hundreds of pages describing billions in stimulus spending and tax relief, are significant new health information privacy and security provisions. These provisions have the potential to impact every “covered entity” under HIPAA, including hospitals, physicians and health plans, as well as “business associates” who were not previously covered by HIPAA. Among these new provisions are...

Please see full alert for more information.