News & Analysis as of September 18, 2024

Department of Health and Human Services (HHS)

+ Follow

The HIPAA Omnibus Rule is a final rule issued by the U.S. Department of Health and Human Services on January 17, 2013. The Rule aims to strengthen existing privacy protections within the Health Insurance Portability and Accountability Act of 1996 (HIPAA), improve the government's ability to enforce those protections, and give individuals greater access to their health information. One of the most significant changes associated with the Rule is the application of HIPAA's requirements to business associates of health care providers and health care claim processors. HHS broadened HIPAA's application to these groups after several large breaches were tied to business associates. less -

The Biggest Changes in HIPAA/HITECH Omnibus Rule & Recommended Action Steps—Ted Kobus

HHS Addresses Federal Court Invalidation of Certain Provisions of the HIPAA rule Relating to the Third-Party Requests for Patient...

Epstein Becker & Green on 2/12/2020

On January 28, 2020, the Department of Health & Human Services (“HHS”) Office for Civil Rights (“OCR”) addressed a federal court’s January 23rd invalidation of certain provisions of the Health Insurance Portability and...more

Modified HIPAA Rules for Sending Records to Third Parties

Holland & Hart - Health Law Blog on 2/10/2020

Thanks to a federal judge, the Office for Civil Rights has modified its rules for sending records to third parties. Covered entities are no longer required by HIPAA to send non-electronic protected health information (“PHI”)...more

District Court Ruling Impacts HIPAA Access Request Permissible Charges

Baker Donelson on 2/5/2020

On January 23, 2020, the United States District Court for the District of Columbia declared sections of the 2013 Omnibus Rule unlawful. The Court found that the Department of Health and Human Services (HHS) impermissibly...more

Understanding When Business Associates Are Directly Liable Under HIPAA

Miller Canfield on 6/4/2019

New guidance issued by the U.S. Department of Health & Human Services (HHS) Office for Civil Rights (OCR) reaffirms that business associates must have proper HIPAA compliance practices, safeguards and documentation in place...more

HHS Delays NPP Amendment Requirement for Laboratories Regulated Under CLIA

Dickinson Wright on 10/30/2013

Under the HIPAA Privacy Rule, a Covered Entity is required to revise its notice of privacy practices (“NPP”) where there is a material change to any of its privacy policies. The HIPAA/HITECH Omnibus Final Rule (the “Omnibus...more

Hearing to Address HIPAA Accounting of Disclosures

Mintz - Health Care Viewpoints on 9/26/2013

The HHS Office of Civil Rights (OCR) announced that the Health Information Technology (HIT) Policy Committee’s Privacy and Security Tiger Team will hold a virtual, public hearing on Monday, September 30 from 11:45 a.m. to...more

It's Never Too Late To Give Guidance: OCR Starts Releasing HIPAA Omnibus Rule Guidance In Anticipation Of September 23 Compliance...

Akerman LLP on 9/23/2013

This has been a busy week for the Department of Health and Human Services / Office for Civil Rights (HHS/OCR). It has started releasing guidance on various provisions of the Omnibus HIPAA final rule (the "Final Rule") in...more

Days Before Enforcement Date OCR Issues New Guidance

Holland & Knight LLP on 9/20/2013

Just days before the September 23, 2013 enforcement date for the new HITECH Act Omnibus rules, the Department of Health and Human Services' Office for Civil Rights has published several new guidance tools and documents. On...more

HHS Office of Civil Rights Releases Several Model Notices of Privacy Practices

Baker Donelson on 9/18/2013

The HHS Office of Civil Rights (OCR) recently released several versions of a model Notice of Privacy Practices (NPP) for use by covered entity health plans and health care providers. The notices have been written specifically...more

HHS To Revamp Limits On Payments To Pharmacies For Refill Reminder Programs

Akerman LLP on 9/17/2013

The HIPAA Privacy Regulations have long required covered entities to seek a patient authorization in order to use or disclose protected health information ("PHI") for marketing purposes. However, the Office for Civil Rights...more

Tick, Tock: Less than 60 Days to Comply with Updated HIPAA/HITECH Rules

Poyner Spruill LLP on 7/26/2013

There are now less than 60 days left for covered entities and business associates to implement provisions set forth in the final omnibus HIPAA/HITECH rules issued by the U.S. Department of Health and Human Services (HHS) in...more

Are Your HIPAA Privacy Policies Up to Date?

Ogletree, Deakins, Nash, Smoak & Stewart,... on 7/22/2013

If you haven’t focused on HIPAA lately, now is the time....more

Cloud Storage Providers Storing Protected Health Information May Be Obligated to Comply with HIPAA Regulations

Wilson Sonsini Goodrich & Rosati on 4/17/2013

A recently issued government rule may unknowingly create significant liability and legal risk for many technology enterprises. The expanded definition of "business associates" and related interpretations by the Department of...more

The HIPAA/HITECH Final Rule has arrived!

Sands Anderson PC on 4/9/2013

If you are a health care provider and/or someone who routinely performs work involving patient health information on behalf of a health care provider, you likely need to know about the HIPAA/HITECH Final Rule....more

HIPAA’S FINAL RULE: Putting Things in Perspective – Comments from OCR

K&L Gates LLP on 4/2/2013

On March 22, 2013, Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) Director Leon Rodriguez presented the keynote address to attendees of the American Health Lawyers’ Association HIPAA/HITECH Conference in...more

McAfee & Taft EmployerLINC Employee Benefits Alert: New HIPAA regulations for sponsors of group health plans

McAfee & Taft on 3/27/2013

The U.S. Department of Health and Human Services recently released its final regulations – also known as the “Final Rule” or “Omnibus Rule” – modifying the privacy, security, breach notification and enforcement rules...more

What We Need to Do to Comply with the Final HIPAA Rule: A Summary of the Privacy Obligations for Health Care Providers, Health...

Winstead PC on 3/19/2013

On January 25, 2013, the U.S. Department of Health and Human Services (HHS) published the highly anticipated Omnibus Rule, which makes extensive changes (as promulgated by the Health Information Technology for Economic and...more

Highlights of the Omnibus HIPAA/HITECH Final Rule

Cozen O'Connor on 3/7/2013

On January 25, 2013, the Office of Civil Rights (OCR) of the Department of Health & Human Services (HHS) published the long-awaited omnibus final regulation governing health data privacy, security and enforcement (Omnibus...more

The HIPAA “Omnibus” Final Rule Part II - Revisions to Business Associate Definition, Liability and Obligations, Certain Individual...

Dickinson Wright on 3/1/2013

The United States Department of Health and Human Services (the “Department” or “HHS”) issued the “Omnibus” Final Rule (the “Final Rule”) on January 17th, 2013. The Final Rule contains long-awaited rules and clarifications...more

View per page

Page: of 2

HIPAA Omnibus Rule › HITECH Act › Department of Health and Human Services (HHS)

HHS Addresses Federal Court Invalidation of Certain Provisions of the HIPAA rule Relating to the Third-Party Requests for Patient...

Modified HIPAA Rules for Sending Records to Third Parties

District Court Ruling Impacts HIPAA Access Request Permissible Charges

Understanding When Business Associates Are Directly Liable Under HIPAA

HHS Delays NPP Amendment Requirement for Laboratories Regulated Under CLIA

Hearing to Address HIPAA Accounting of Disclosures

It's Never Too Late To Give Guidance: OCR Starts Releasing HIPAA Omnibus Rule Guidance In Anticipation Of September 23 Compliance...

Days Before Enforcement Date OCR Issues New Guidance

HHS Office of Civil Rights Releases Several Model Notices of Privacy Practices

HHS To Revamp Limits On Payments To Pharmacies For Refill Reminder Programs

Tick, Tock: Less than 60 Days to Comply with Updated HIPAA/HITECH Rules

Are Your HIPAA Privacy Policies Up to Date?

Cloud Storage Providers Storing Protected Health Information May Be Obligated to Comply with HIPAA Regulations

The HIPAA/HITECH Final Rule has arrived!

HIPAA’S FINAL RULE: Putting Things in Perspective – Comments from OCR

McAfee & Taft EmployerLINC Employee Benefits Alert: New HIPAA regulations for sponsors of group health plans

What We Need to Do to Comply with the Final HIPAA Rule: A Summary of the Privacy Obligations for Health Care Providers, Health...

Highlights of the Omnibus HIPAA/HITECH Final Rule

The HIPAA “Omnibus” Final Rule Part II - Revisions to Business Associate Definition, Liability and Obligations, Certain Individual...

Special Edition: Health Law Update - February 28, 2013

New HIPAA Omnibus Regulations – What Employers Who Sponsor Group Health Plans Need to Know to Comply

Breaking Down The HIPAA Rule Changes: Part 5 Of 5 - Changes To Patients' Rights Under The Final Rule

The New HIPAA Omnibus Rule & Your Liability — A Detailed Review

Final HIPAA Regulations: What's Changed (and What Hasn't) for Group Health Plans

What Employers That Maintain Group Health Plans Need to Know About the HIPAA Omnibus Regulations

HIPAA Omnibus Rule › HITECH Act › Department of Health and Human Services (HHS)

"My best business intelligence, in one easy email…"