The Department of Health and Human Services in July published a proposed rule to modify and strengthen provisions of the HIPAA privacy, security and enforcement rules, as mandated under the HITECH Act. Among other changes, the proposed rule would make business associates subject to the privacy and security rules as if they were covered entities, restrict certain uses and disclosures of patient information, expand patient rights to obtain their electronic health information, and increase penalties for violations of the privacy and security rules.
A conference call on August 12 will cover changes related to marketing, fundraising, sale of data, honoring individual requests to restrict disclosure and an individual's right to access his or her records. The second conference call on Aug. 17 will cover changes that affect business associates. Each one-hour call will start at 3:00 Eastern Time. Registration is available at surveymonkey.com/s/783H5TK.
--Joseph Goedert
Be the first to comment on this post using the section below.