In addition to moving HIPAA enforcement over to the Office of Civil Rights (OCR), HHS proposed new rules regarding HIPAA. The "breach notification" regulations, as part of the economic stimulus package, will require health providers, health plans and other entities covered by HIPAA to notify impacted individuals, HHS and the media of breaches impacting more than 500 individuals. Those entities that properly secure information through encryption or destruction will not be required to give notification.
These regulations will now cover business associates of covered entities. This is a big change to HIPAA.
Thursday, August 27, 2009
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment