Your email inboxes have likely been flooded with updates regarding the U.S. Department of Health and Human Services’ final rule to strengthen the privacy and security protections of health information established under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
The final rule, among other things, enhances a patient’s privacy protections, provides individuals new rights to access their health information and strengthens the government’s ability to enforce the law. The final rule was released on Jan. 17 and becomes effective March 26, but an organization covered by the act, i.e., a “covered entity” (CE) or “business associate” (BA) will have 180 days beyond the effective date (or Sept. 22, 2013) to come into compliance.
