HHS releases interim final rule for breach notification, secure PHI
HIM-HIPAA Insider, August 25, 2009
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
HHS released an interim final rule regarding breach notification and the acceptable methods for covered entities (CE) and business associates (BA) to encrypt and destroy patient records to prevent breaches of protected health information (PHI).
The American Recovery and Reinvestment Act (ARRA) of 2009 required HHS to issue the final guidance six months after President Barack Obama signed into law Title XIII of the ARRA—the Health Information Technology for Clinical and Economic Health (HITECH) Act.
The breach notification regulations take effect September 19—30 days from the announcement of the final guidance. The regulations include the following:
-
Notice to patients of breaches "without reasonable delay" within 60 days
-
Notice to CEs by BAs when BAs discover a breach
-
Notice to "prominent media outlets" on breaches of more than 500 patient records
-
Notice to "next of kin" on breaches of patients who are deceased
-
Notice to the secretary of HHS of breaches of 500 or more patient records without reasonable delay
-
Annual notice to the secretary of HHS of breaches of fewer than 500 patient records when their PHI is unsecure (which poses a significant financial risk or other harm to the individual)
Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!
Related Products
-
Guide to HIPAA Auditing, Second Edition
This new edition of a best-selling book delivers the hands-on tools and guidance you need to conduct effective in-house...
-
The No-Hassle Guide to HIPAA Policies: A Privacy and Security Toolkit
HIPAA regulations require extensive documentation—likely more than you've done in the past. Changing the way you look...
-
The HIPAA and HITECH Toolkit
The HIPAA and HITECH Toolkit is a valuable resource that helps both CEs and BAs understand and meet the HITECH Act's...
-
HIPAA/HITECH Omnibus Final Rule: Stay Compliant With 2013 Changes
Is your organization ready to comply with the HIPAA Omnibus Final Rule? Our experts help you understand the Rule and help...
-
The HIPAA Omnibus Rule
Understand the HIPAA Omnibus Rule and what you must do to ensure compliance
Most Popular
- Articles
-
- CMS seeks comment on quality measures
- Note from Hugh
- Note from the instructor: OIG report on usage of financial liability "G" modifiers
- CMS releases new QAPI resources
- HIPAA Q&A: Receiving faxed HEDIS requests
- Q/A: How do we report therapy G codes and modifiers for multiple therapies?
- Remind your workforce members to ’zip their lips’ when it comes to patient privacy
- CMS says it's not too late to avoid payment adjustments
- Documentation of medical necessity drives successful RA appeals
- FDA makes new proposal related to C. diff and other threatening pathogens
- E-mailed
-
- Note from the instructor: OIG report on usage of financial liability "G" modifiers
- Q/A: How do we report therapy G codes and modifiers for multiple therapies?
- HIPAA Q&A: Receiving faxed HEDIS requests
- CMS says it's not too late to avoid payment adjustments
- FDA makes new proposal related to C. diff and other threatening pathogens
- Eyes see more ICD-10-CM codes because of laterality
- Product of the week: Optimizing PEPPER in the Audit Environment
- CMS releases new QAPI resources
- CMS releases new ICD-10 FAQs
- Case Management Monthly, June 2013
- Searched