HIPAA
The Federal Trade Commission June 8 released for public comment a notice of proposed changes to breach notification requirements for entities that collect health information but are not covered by HIPAA鈥檚 privacy and security requirements.
The Department of Health and Human Services鈥 Office for Civil Rights should finalize its proposed 鈥渃ommonsense鈥 amendments to the HIPAA Privacy Rule to support reproductive health care privacy, but immediately suspend or amend its December 2022 online tracking guidance, which 鈥渁ggravates the risk鈥
May 22, 2023
Melanie Fontes Rainer
Director, Office for Civil Rights
Department of Health and Human Services
Hubert H. Humphrey Building
200 Independence Avenue, S.W., Room 515F
Washington, DC 20201
Re: HIPAA Privacy Rule to Support Reproductive Health Care Privacy; 88 Fed. Reg. 23506 (RIN 0945鈥撯
The Department of Health & Human Services鈥 Office for Civil Rights today released a proposed rule that would prohibit entities regulated by the HIPAA Privacy Rule from using or disclosing protected health information to investigate or prosecute patients, providers or others involved in鈥
AHA comments on the proposed Standards for Health Care Attachments Transactions and Electronic Signatures, and Modification to Referral Certification and Authorization Transaction Standard.
HIPAA-regulated entities are not permitted to use online tracking technologies in a manner that would result in impermissible disclosures of protected health information to tracking technology vendors or any other violation of the HIPAA rules, HHS' Office for Civil Rights reminded covered entities鈥
In this proposed rule, HHS seeks to revise, delete, replace or add regulatory language to the Part 2 regulations to align them with those under HIPAA, as well as to improve clarity or readability. The agency notes that it will issue a separate rule on CARES Act provisions related to鈥
The Department of Health and Human Services鈥 Office for Civil Rights yesterday released a video on recognized security practices under the HIPAA security rule and how covered entities may demonstrate implementation.
Comments are due June 6.
The Centers for Medicare & Medicaid Services yesterday issued guidance to clarify certain HIPAA protections and responsibilities.