HIPAA: Health Insurance Portability and Accountability Act
September 23, 2013 was HIPAA privacy and security deadline
The U.S Department of Health & Human Services (HHS) recently adopted new rules which make changes to existing privacy, security and breach notification requirements in what is often referred to as the final “HIPAA Omnibus Rule.” These new rules stem from changes made under the Health Information Technology for Economic and Clinical Health (HITECH) Act which is part of the same law that created the Electronic Health Records (EHRs) Incentive Program under Medicare and Medicaid.
All covered physician practices must update their HIPAA policies and procedures and otherwise implement the changes required by these regulations no later than the September 23, 2013 compliance date. These new rules will mean physicians will need to update their Business Associate Agreements (BAAs) and their Notices of Privacy Practices (NPPs) and it will require they understand the importance of encryption electronic protected health information.
The AMA has a number of free resources to help physicians comply. These resources can be found below, and are also available for AMA PRA Category 1 Credit™. Login to the AMA Online Learning Center to access this free CME activity.
AMA/HIMSS podcast, “The Nuts and Bolts of Achieving HIPAA Security Rule Compliance through Effective Risk AssessmentExternal Link”
HIPAA privacy and security toolkit: Helping your practice meet new compliance requirementsPDF FIle
HIPAA Security Rule: Frequently asked questions regarding encryption of personal health informationPDF FIle
Sample Notice of Privacy PracticesWord File
Sample Business Associate AgreementWord File
Administrative Simplification in the Affordable Care Act
The Affordable Care Act (ACA) expands on provisions in HIPAA that support administrative simplification. These new requirements include operating rules for the HIPAA-named standards, a standard for electronic funds transfer, and a national health plan identifier. The follow is an article the goes into more detail about the continuing efforts in ACA to provide administrative simplification.
Continuation of Administrative Simplification in the Affordable Care ActPDF FIle
The following are highlights of some of the HIPAA-related topics.
Privacy Standards and New Compliance Toolkit
Mobile Device Privacy and Security
Transaction and Code Set Standards
Operating Rules for HIPAA Transactions
Health Plan Identifier
HIPAA Complaints and Violations