|
HUMAN RESOURCES: CLIENT ALERT
Update HIPAA Notices by September 23
|
|
September 20, 2013
On Jan. 25, 2013, the Department of Health and Human Services (HHS) issued a final rule under HIPAA's administrative simplification provisions. The final rule updates HIPAA's privacy, security, enforcement and breach notification requirements, and includes changes required by the Health Information Technology for Economic and Clinical Health Act (HITECH Act).
Employers are required to update their HIPAA Notice of Privacy Practices by September 23, 2013, and to inform participants in HIPAA-covered plans of new rights and new restrictions on the plans' use of PHI.
A group health plan that provides health benefits solely through an insurance contract with a health insurance issuer or HMO, and does not create or receive protected health information other than summary health information or information on whether an individual is participating in the group health plan, or is enrolled in or has disenrolled from a health insurance issuer or HMO offered by the plan, is not required to maintain or provide a notice under this section. (45_CFR164.520(a)(2)).
Our Legislative Brief provides an overview of key changes made by the final HIPAA rule and outlines compliance steps for health plans.
Read more:
If you would like assistance with this, or have questions, please contact Sean Nehlsen, our HR Department Manager at 216-520-3300 x171 or snehlsen@thealphaga.com.
Thank you,
The Alpha Group |
