Health Information Management

Q&A: Notice of Privacy Practices changes

HIM-HIPAA Insider, June 7, 2011

Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!

Q: We were very familiar with Notice of Privacy Practices (NPP) requirements before the enactment of HITECH. Can you describe any additional requirements that are a result of HITECH?

A: Title XIII, the HITECH Act of ARRA, addresses some aspects of privacy but does not replace the
HIPAA Privacy Rule. HITECH does not include any specific NPP requirements. NPPs that meet all HIPAA Privacy Rule requirements are acceptable under HITECH. HITECH did, however, make significant changes, including:
  • Increased penalties
  • New breach notification rules
  • New rules for restrictions requested by individuals
  • New prohibitions on the sale of PHI
  • New rules pertaining to EHRs, including accounting of disclosures
Editor’s note: Mary D. Brandt, MBA, RHIA, CHE, CHPS, nationally recognized expert on patient privacy, information security, and regulatory compliance, answered this question in the June issue of Briefings on HIPAA.



Want to receive articles like this one in your inbox? Subscribe to HIM-HIPAA Insider!

Most Popular