Feds Propose Changes to HIPAA Privacy Rule
May 31, 2011
The federal government today issued a proposed rule that would enable people to obtain a report identifying all individuals who electronically access their protected health information. The rule would significantly change the privacy policies and procedures of health care providers and their business associates.
The proposed rule enforces two rights for individuals — a right to an “accounting of disclosure” and a new right to an “access report.” The HITECH Act of 2009 requires that covered entities and business associates account for electronic disclosures of public health information. This proposed rule provides a means for meeting the Act’s requirement by changing the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule, which currently requires the tracking of access to electronic health records but not the sharing of this information with affected individuals.
The government will entertain comments on the proposed rule through August 1, 2011.