HHS Requests Comments on Proposed HITECH Amendments to HIPAA Rules
19 July 2010Privacy Alert
The HITECH Act strengthened and expanded the scope of the HIPAA Privacy and Security Rules, enhanced the HIPAA penalty provisions, provided for HIPAA enforcement by state attorneys general, and established a federal data breach notification law. On 14 July 2010 HHS published a notice of proposed rulemaking (NPRM) to modify the HIPAA Privacy, Security, and Enforcement Rules to align with the HITECH Act's statutory changes. There is a 60 day public comment period. These changes will require substantial operational changes for HIPAA covered entities and their business associates.