Posted by Jason Greis on March 2, 2009 under Articles |
Health care providers and any businesses that provide information technology services for them will be subject to much greater regulation of their information security practices as a result of a major component of the recent economic stimulus legislation. Known as the Health Information Technology for Economic and Clinical Health Act (or the “HITECH Act”), this portion of the federal economic stimulus package is the most expansive modification to the federal privacy and security rules for health-related businesses since the 1996 enactment of HIPAA. Read More...
Tags: american recovery and reinvestment act, ARRA, audit, breach, business associate, business associate agreement, civil monetary penalties, cmp, covered entity, enforcement, federal trade commission, fine, ftc, greisguide, greisguidetoltachs, Health Information Technology for Economic and Clinical Health Act, hhs, hipaa, HITECH, hospital, interim final rules, kimberly kannensohn, limited data set, ltac, LTACH, LTCH, minimum necessary, notification, phi, privac, safeguard, security
Posted by Jason Greis on February 24, 2009 under Articles |
On February 17, 2009, President Barack Obama signed the American Recovery and Reinvestment Act of 2009 (the “ARRA”), commonly referred to as the federal stimulus bill. The ARRA contains several provisions — intended to promote the use of health information technology — that would significantly expand the scope of the privacy and security requirements of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). These changes, summarized below, include: Read More...
Tags: american recovery and reinvestment act, ARRA, BAA, business associate, business associate agreement, covered entity, Department of Health and Human Services, disclosure, federal trade commission, ftc, greisguide, greisguidetoltachs, health insurance portability and accountability act, hipaa, hospital, kimberly kannensohn, liability, ltac, LTACH, LTCH, marketing, minimum necessary, notification, obama, personal health information, personal health record, phi, PHR, privacy, ryan higgins, security