Institute:Office of National Coordinator (ONC) Workforce Training Curriculum
Component:The Culture of Health Care
Unit:Privacy, Confidentiality, and Security
Lecture:HIPAA Privacy Rule
Slide content:HIPAA Privacy and Security 2006 HIPAA Rule Privacy Rule: http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary Security Rule: www.hhs.gov/ocr/privacy/hipaa/understanding/srsummary.html 2008 Genetic Information Nondiscrimination Act (GINA) Genetic information is protected under the HIPAA Privacy Rule Prohibits most health plans from using/disclosing genetic information for underwriting purposes www.eeoc.gov/laws/statutes/gina.cfm 2009 ARRA/HITECH legislation enhanced both rules http://www.hhs.gov/ocr/privacy 2013 HIPAA Rule updated Strengthens privacy protections, new rights for individuals to their health information, strengthens the government s ability to enforce the law www.hhs.gov/about/news/2013/01/17/new-rule-protects-patient-privacy-secures-health-information.html 4
Slide notes:This lecture discusses the Health Insurance Portability and Accountability Act (HIPAA) [ hip -uh] Privacy Rule, which was signed into effect in 2006. In 2008, the Genetic Information Nondiscrimination Act specifically addressed genetic information under the HIPAA Privacy Rule, prohibiting health plans from using or disclosing genetic information for underwriting purposes. The 2009 Health Information Technology for Economic and Clinical Health Act, or HITECH [high- tech ] legislation, provided updates to the rules. Since the 2009 rule publication and HITECH, additional updates have been made through the federal rule-making process regarding the meaningful use program stages. In 2013, the HIPAA rule that focused on increasing the publics privacy protections and rights regarding their health information was updated and strengthened the governments ability to enforce the law regardless of where the information is held, whether by a health plan, a health care provider, or one of their business associates. There are also ongoing attempts to ensure that federal and state privacy laws are in agreement with each other. Aligning these laws is a significant work effort, since all state laws are not the same. The benefit of this effort results in not only protection of personal health information but also support in addressing the various issues involved in interstate commerce. 4