Office of the Secretary May 31, 2011 – Federal Register Recent Federal Regulation Documents

The Department of Homeland Security Privacy Office will host a public workshop, ``Privacy Compliance Basics and 2011 Developments.''

The Department of Health and Human Services (HHS or ``the Department'') is issuing this notice of proposed rulemaking to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule's standard for accounting of disclosures of protected health information. The purpose of these modifications is, in part, to implement the statutory requirement under the Health Information Technology for Economic and Clinical Health Act (``the HITECH Act'' or ``the Act'') to require covered entities and business associates to account for disclosures of protected health information to carry out treatment, payment, and health care operations if such disclosures are through an electronic health record. Pursuant to both the HITECH Act and its more general authority under HIPAA, the Department proposes to expand the accounting provision to provide individuals with the right to receive an access report indicating who has accessed electronic protected health information in a designated record set. Under its more general authority under HIPAA, the Department also proposes changes to the existing accounting requirements to improve their workability and effectiveness.