HIPAA Privacy Information

On December 20, 2000 President Clinton issued the much-anticipated Health Insurance Portability and Accountability Act (HIPAA) health care privacy regulations.

In July 2001, the Department of Health and Human Services issued information which answers common questions and clarifies information about the privacy regulations.

On August 14, 2002 HHS released the final rule for Privacy, as well as a Press Release and Fact Sheet.

October 8, 2002 The Office of Civil Rights has released some frequently asked questions about the Privacy regulations.

August 14, 2002 HHS released the final rule for Privacy, as well as a Press Release and Fact Sheet. Please see http://www.hhs.gov/ocr/hipaa/.

September 2008 Guidance on Communications with Family, Friends, or Others Involved in a Patient's Care Consumer Provider

December 2008 The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has published new HIPAA Privacy Rule guidance as part of the Department’s Privacy and Security Toolkit to implement The Nationwide Privacy and Security Framework for Electronic Exchange of Individually Identifiable Health Information (Privacy and Security Framework). The Privacy and Security Framework and Toolkit is designed to establish privacy and security principles for health care stakeholders engaged in the electronic exchange of health information and includes tangible tools to facilitate implementation of these principles. The new HIPAA Privacy Rule guidance in the Toolkit discusses how the Privacy Rule supports and can facilitate electronic health information exchange in a networked environment. In addition, the guidance includes documents that address electronic access by an individual to his or her protected health information and how the Privacy Rule may apply to and supports the use of Personal Health Records.

These new HIPAA guidance documents are available on the OCR Privacy Rule Web Site at http://www.hhs.gov/ocr/hipaa/hit/. For more information on the Privacy and Security Framework and to view other documents in the Privacy and Security Toolkit, visit http://www.hhs.gov/healthit/privacy/framework.html.

ONC's Office of the Chief Privacy Officer (OCPO) recently released a "Guide to Privacy and Security of Health Information,"* an instructional guide designed to help healthcare practitioners, staff, and other professionals better understand the important role privacy and security play in the use of electronic health records (EHRs) and Meaningful Use.

January 2013 Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules was published in the Federal Register on January 25, 2013. Covered entities and business associates must comply with the applicable requirements of this final rule by September 23, 2013.