Health Insurance Portability and Accountability Act - Revision history

Shawndouglas at 00:43, 8 January 2022

2022-01-08T00:43:38Z

← Older revision		Revision as of 00:43, 8 January 2022
Line 119:		Line 119:

	==Further reading==		==Further reading==

	* {{cite web \|url=https://www.govinfo.gov/app/details/PLAW-104publ191 \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office}}		* {{cite web \|url=https://www.govinfo.gov/app/details/PLAW-104publ191 \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office}}
	* {{cite web \|url=https://www.govtrack.us/congress/bills/104/s1028 \|title=S. 1028 (104th): Health Insurance Reform Act of 1995 \|work=GovTrack.us \|publisher=Civic Impulse, LLC}}		* {{cite web \|url=https://www.govtrack.us/congress/bills/104/s1028 \|title=S. 1028 (104th): Health Insurance Reform Act of 1995 \|work=GovTrack.us \|publisher=Civic Impulse, LLC}}
	* {{cite journal \|url=https://library.cqpress.com/cqalmanac/document.php?id=cqal96-1092479 \|journal=CQ Almanac 1996 \|title=Bill Makes Health Insurance ‘Portable’ \|volume=52 \|pages=6-28–6-39 \|date=1997}}		* {{cite journal \|url=https://library.cqpress.com/cqalmanac/document.php?id=cqal96-1092479 \|journal=CQ Almanac 1996 \|title=Bill Makes Health Insurance ‘Portable’ \|volume=52 \|pages=6-28–6-39 \|date=1997}}

	==References==		==References==
	{{Reflist\|colwidth=30em}}		{{Reflist\|colwidth=30em}}

Shawndouglas: Updated URLs for 2022

2022-01-08T00:43:19Z

Updated URLs for 2022

← Older revision		Revision as of 00:43, 8 January 2022
Line 71:		Line 71:

	==Enforcement==		==Enforcement==
	On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement. It became effective on March 16, 2006. The Enforcement Rule set civil money penalties for violating HIPAA rules and established procedures for investigations and hearings for HIPAA violations. Before the enforcement rule, the deterrent effects of the legislation seemed negligible, with few prosecutions for violations.<ref name="SteinFines" /> Enforcement operations were ratcheted up further with the passage of the Health Information Technology for Economic and Clinical Health Act (HITECH) in 2009, which greatly increased the financial penalties that could be applied to entities in non-compliance.<ref name="Solove10">{{cite journal \|url=~~http~~://library.ahima.org/doc?oid=106325 \|title=HIPAA Turns 10: Analyzing the Past, Present and Future Impact \|author=Solove, D.J. \|journal=Journal of AHIMA \|volume=84 \|issue=4 \|pages=22–28 \|year=April 2013 \|accessdate=15 April 2020}}</ref>		On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement. It became effective on March 16, 2006. The Enforcement Rule set civil money penalties for violating HIPAA rules and established procedures for investigations and hearings for HIPAA violations. Before the enforcement rule, the deterrent effects of the legislation seemed negligible, with few prosecutions for violations.<ref name="SteinFines" /> Enforcement operations were ratcheted up further with the passage of the Health Information Technology for Economic and Clinical Health Act (HITECH) in 2009, which greatly increased the financial penalties that could be applied to entities in non-compliance.<ref name="Solove10">{{cite journal \|url=https://library.ahima.org/doc?oid=106325 \|title=HIPAA Turns 10: Analyzing the Past, Present and Future Impact \|author=Solove, D.J. \|journal=Journal of AHIMA \|volume=84 \|issue=4 \|pages=22–28 \|year=April 2013 \|accessdate=15 April 2020}}</ref>

	By the end of 2014, the U.S. Department of Health and Human Resources (HHS) reported investigating 106,522 HIPAA complaints against national pharmacy chains, major health care centers, insurance groups, hospital chains and other small providers since April 2003. The HHS reported 23,314 of those cases had been resolved by requiring changes in privacy practice or by corrective action. 10,566 cases were investigated and found that HIPAA was followed correctly. Another 68,412 cases were found to be ineligible for enforcement because, for example, a violation occurred before HIPAA became effective, a case was withdrawn by the pursuer, or an activity did not actually violate the rules.<ref name="HHSEnforceArch">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/enforcement/highlights/index.html \|archiveurl=https://web.archive.org/web/20150211170207/http://www.hhs.gov/ocr/privacy/hipaa/enforcement/highlights/index.html \|title=Enforcement Highlights \|publisher=U.S. Department of Health and Human Services \|date=15 January 2015 \|archivedate=11 February 2015 \|accessdate=11 February 2015}}</ref>		By the end of 2014, the U.S. Department of Health and Human Resources (HHS) reported investigating 106,522 HIPAA complaints against national pharmacy chains, major health care centers, insurance groups, hospital chains and other small providers since April 2003. The HHS reported 23,314 of those cases had been resolved by requiring changes in privacy practice or by corrective action. 10,566 cases were investigated and found that HIPAA was followed correctly. Another 68,412 cases were found to be ineligible for enforcement because, for example, a violation occurred before HIPAA became effective, a case was withdrawn by the pursuer, or an activity did not actually violate the rules.<ref name="HHSEnforceArch">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/enforcement/highlights/index.html \|archiveurl=https://web.archive.org/web/20150211170207/http://www.hhs.gov/ocr/privacy/hipaa/enforcement/highlights/index.html \|title=Enforcement Highlights \|publisher=U.S. Department of Health and Human Services \|date=15 January 2015 \|archivedate=11 February 2015 \|accessdate=11 February 2015}}</ref>
Line 105:		Line 105:
	Writing for the ''Loyola Consumer Law Review'', attorney and legal writer Anna Colvert wrote:		Writing for the ''Loyola Consumer Law Review'', attorney and legal writer Anna Colvert wrote:

	<blockquote>Generally, HIPAA is considered a step in the right direction regarding patient privacy, and it has resulted in more descriptive and detailed privacy policies; however, it has not improved the online privacy practices of these organizations. While HIPAA is a solid foundation in protecting patients’ healthcare information there is more work to be done..."<ref name="Colvert">{{cite journal \|url=https://lawecommons.luc.edu/lclr/vol25/iss4/6 \|journal=Loyola Consumer Law Review \|title=HIPAA'S Influence on Consumers: Friend or Foe? \|author=Colvert, Anna \|volume=25 \|issue=4 \|pages=431–447 \|year=2013 \|accessdate=15 April 2020}}</ref></blockquote>		<blockquote>Generally, HIPAA is considered a step in the right direction regarding patient privacy, and it has resulted in more descriptive and detailed privacy policies; however, it has not improved the online privacy practices of these organizations. While HIPAA is a solid foundation in protecting patients’ healthcare information there is more work to be done..."<ref name="Colvert">{{cite journal \|url=https://lawecommons.luc.edu/lclr/vol25/iss4/6/ \|journal=Loyola Consumer Law Review \|title=HIPAA'S Influence on Consumers: Friend or Foe? \|author=Colvert, Anna \|volume=25 \|issue=4 \|pages=431–447 \|year=2013 \|accessdate=15 April 2020}}</ref></blockquote>

	A May 2013 ''Computerworld'' reported on a survey conducted by the Ponemon Institute that found 51 percent of respondents believed "HIPAA compliance requirements can be a barrier to providing effective patient care" and 59 percent "cited the complexity of HIPAA requirements as a major barrier to modernizing the healthcare system."<ref name="Mearian">{{cite web \|url=https://www.computerworld.com/article/2496995/hipaa-rules--outdated-tech-cost-u-s--hospitals--8-3b-a-year.html \|title=HIPAA rules, outdated tech cost U.S. hospitals $8.3B a year \|author=Mearian, L. \|work=Computerworld \|publisher=Computerworld, Inc \|date=07 May 2013 \|accessdate=15 April 2020}}</ref>		A May 2013 ''Computerworld'' reported on a survey conducted by the Ponemon Institute that found 51 percent of respondents believed "HIPAA compliance requirements can be a barrier to providing effective patient care" and 59 percent "cited the complexity of HIPAA requirements as a major barrier to modernizing the healthcare system."<ref name="Mearian">{{cite web \|url=https://www.computerworld.com/article/2496995/hipaa-rules--outdated-tech-cost-u-s--hospitals--8-3b-a-year.html \|title=HIPAA rules, outdated tech cost U.S. hospitals $8.3B a year \|author=Mearian, L. \|work=Computerworld \|publisher=Computerworld, Inc \|date=07 May 2013 \|accessdate=15 April 2020}}</ref>
Line 122:		Line 122:
	* {{cite web \|url=https://www.govinfo.gov/app/details/PLAW-104publ191 \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office}}		* {{cite web \|url=https://www.govinfo.gov/app/details/PLAW-104publ191 \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office}}
	* {{cite web \|url=https://www.govtrack.us/congress/bills/104/s1028 \|title=S. 1028 (104th): Health Insurance Reform Act of 1995 \|work=GovTrack.us \|publisher=Civic Impulse, LLC}}		* {{cite web \|url=https://www.govtrack.us/congress/bills/104/s1028 \|title=S. 1028 (104th): Health Insurance Reform Act of 1995 \|work=GovTrack.us \|publisher=Civic Impulse, LLC}}
	* {{cite journal \|url=~~http~~://library.cqpress.com/cqalmanac/document.php?id=cqal96-1092479 \|journal=CQ Almanac 1996 \|title=Bill Makes Health Insurance ‘Portable’ \|volume=52 \|pages=6-28–6-39 \|date=1997}}		* {{cite journal \|url=https://library.cqpress.com/cqalmanac/document.php?id=cqal96-1092479 \|journal=CQ Almanac 1996 \|title=Bill Makes Health Insurance ‘Portable’ \|volume=52 \|pages=6-28–6-39 \|date=1997}}

	==References==		==References==

Shawndouglas: Fixed citation issue

2021-09-19T19:55:27Z

Fixed citation issue

← Older revision		Revision as of 19:55, 19 September 2021
Line 16:		Line 16:
	Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=https://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, R. \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=15 April 2020}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=https://www.hhs.gov/hipaa/for-professionals/special-topics/enforcement-rule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=15 April 2020}}</ref>		Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=https://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, R. \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=15 April 2020}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=https://www.hhs.gov/hipaa/for-professionals/special-topics/enforcement-rule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=15 April 2020}}</ref>

	Additional updates to the enforcement rule came with the [[Health Information Technology for Economic and Clinical Health Act]] (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="~~HHSEnfo~~">{{cite web \|url=https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=15 April 2020}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=https://www.govinfo.gov/content/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=15 April 2020}}</ref>		Additional updates to the enforcement rule came with the [[Health Information Technology for Economic and Clinical Health Act]] (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="HHSHITECH">{{cite web \|url=https://www.hhs.gov/hipaa/for-professionals/special-topics/hitech-act-enforcement-interim-final-rule/index.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=15 April 2020}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=https://www.govinfo.gov/content/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=15 April 2020}}</ref>

	==Structure==		==Structure==

Shawndouglas: Updated citations for 2020.

2020-04-15T21:35:23Z

Updated citations for 2020.

Show changes

Shawndouglas: Fixed image; updated references section

2016-08-16T20:55:31Z

Fixed image; updated references section

← Older revision		Revision as of 20:55, 16 August 2016
Line 1:		Line 1:
	[[File:HIPAA Screenshot.png~~\|\|thumb~~\|400px\|right]]		[[File:HIPAA Screenshot.png\|400px\|right]]
	The '''Health Insurance Portability and Accountability Act of 1996''' ('''HIPAA''') was enacted by the United States Congress and signed by President Bill Clinton in 1996. Its intended purpose was "to improve portability and continuity of health insurance coverage in the group and individual markets; to combat waste, fraud, and abuse in health insurance and health care delivery; to promote the use of medical savings accounts; to improve access to long-term care services and coverage; [and] to simplify the administration of health insurance."<ref name="HIPAAGPO">{{cite web \|url=http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/content-detail.html \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office \|accessdate=11 February 2015}}</ref>		The '''Health Insurance Portability and Accountability Act of 1996''' ('''HIPAA''') was enacted by the United States Congress and signed by President Bill Clinton in 1996. Its intended purpose was "to improve portability and continuity of health insurance coverage in the group and individual markets; to combat waste, fraud, and abuse in health insurance and health care delivery; to promote the use of medical savings accounts; to improve access to long-term care services and coverage; [and] to simplify the administration of health insurance."<ref name="HIPAAGPO">{{cite web \|url=http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/content-detail.html \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office \|accessdate=11 February 2015}}</ref>

Line 125:		Line 125:

	==References==		==References==
	~~<references />~~		{{Reflist\|colwidth=30em}}

	<!---Place all category tags here-->		<!---Place all category tags here-->

Shawndouglas: /* References */ Added cats

2016-08-16T20:52:28Z

References: Added cats

← Older revision		Revision as of 20:52, 16 August 2016
Line 128:		Line 128:

	<!---Place all category tags here-->		<!---Place all category tags here-->
			[[Category:Health informatics]]
	[[Category:Health standards]]		[[Category:Health standards]]
	[[Category:Regulatory information]]		[[Category:Regulatory information]]

Shawndouglas: /* Amendments */ Fixed

2015-06-29T17:13:16Z

Amendments: Fixed

← Older revision		Revision as of 17:13, 29 June 2015
Line 16:		Line 16:
	Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, Rob \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=28 February 2012}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref>		Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, Rob \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=28 February 2012}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref>

	Additional updates to the enforcement rule came with the [[Health Information Technology for Economic and Clinical Health]] (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/hitechenforcementifr.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=http://www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=12 February 2015}}</ref>		Additional updates to the enforcement rule came with the [[Health Information Technology for Economic and Clinical Health Act]] (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/hitechenforcementifr.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=http://www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=12 February 2015}}</ref>

	==Structure==		==Structure==

Shawndouglas: /* Amendments */ Internal link.

2015-06-29T17:12:41Z

Amendments: Internal link.

← Older revision		Revision as of 17:12, 29 June 2015
Line 16:		Line 16:
	Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, Rob \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=28 February 2012}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref>		Despite the Privacy Rule, many still argued that the legislation wasn't suitable enough to prevent mishandling of personal health information and that it was impeding research.<ref name="PrivRule" /> These concerns mixed with few incidents of enforcement in the first few years after the 2003 compliance date prompted additional review by the HHS.<ref name="SteinFines">{{cite web \|url=http://www.washingtonpost.com/wp-dyn/content/article/2006/06/04/AR2006060400672.html \|title=Medical Privacy Law Nets No Fines \|author=Stein, Rob \|publisher=The Washington Post \|date=5 June 2006 \|accessdate=28 February 2012}}</ref> On February 16, 2006, HHS issued the Final Rule regarding HIPAA enforcement, to be effective March 16, 2006.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/index.html \|title=The HIPAA Enforcement Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref>

	Additional updates to the enforcement rule came with the Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/hitechenforcementifr.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=http://www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=12 February 2015}}</ref>		Additional updates to the enforcement rule came with the [[Health Information Technology for Economic and Clinical Health]] (HITECH) Act, enacted on February 17, 2009. The Act added "several provisions that strengthen the civil and criminal enforcement of the HIPAA rules" by adding categories of violations and tier levels of penalty amounts.<ref name="HHSEnfo">{{cite web \|url=http://www.hhs.gov/ocr/privacy/hipaa/administrative/enforcementrule/hitechenforcementifr.html \|title=HITECH Act Enforcement Interim Final Rule \|publisher=U.S. Department of Health and Human Services \|accessdate=12 February 2015}}</ref> HIPAA and the HITECH statutes were further revised in January 2013 (effective March 26, 2013) "to strengthen the privacy and security protection for individuals’ health information," update the Breach Notification Rule, "strengthen the privacy protections for genetic information," and revise other portions of HIPAA rules "to improve their workability and effectiveness."<ref name="FR01073">{{cite journal \|url=http://www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf \|format=PDF \|title=Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules \|author=Office for Civil Rights, Department of Health and Human Services \|journal=Federal Register \|volume=78 \|issue=17 \|date=25 January 2013 \|accessdate=12 February 2015}}</ref>

	==Structure==		==Structure==

Shawndouglas: Added image and updated review.

2015-02-17T18:09:10Z

Added image and updated review.

← Older revision		Revision as of 18:09, 17 February 2015
Line 1:		Line 1:
			[[File:HIPAA Screenshot.png\|\|thumb\|400px\|right]]
	The '''Health Insurance Portability and Accountability Act of 1996''' ('''HIPAA''') was enacted by the United States Congress and signed by President Bill Clinton in 1996. Its intended purpose was "to improve portability and continuity of health insurance coverage in the group and individual markets; to combat waste, fraud, and abuse in health insurance and health care delivery; to promote the use of medical savings accounts; to improve access to long-term care services and coverage; [and] to simplify the administration of health insurance."<ref name="HIPAAGPO">{{cite web \|url=http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/content-detail.html \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office \|accessdate=11 February 2015}}</ref>		The '''Health Insurance Portability and Accountability Act of 1996''' ('''HIPAA''') was enacted by the United States Congress and signed by President Bill Clinton in 1996. Its intended purpose was "to improve portability and continuity of health insurance coverage in the group and individual markets; to combat waste, fraud, and abuse in health insurance and health care delivery; to promote the use of medical savings accounts; to improve access to long-term care services and coverage; [and] to simplify the administration of health insurance."<ref name="HIPAAGPO">{{cite web \|url=http://www.gpo.gov/fdsys/pkg/PLAW-104publ191/content-detail.html \|title=Public Law 104 - 191 - Health Insurance Portability and Accountability Act of 1996 \|publisher=U.S. Government Publishing Office \|accessdate=11 February 2015}}</ref>

Line 63:		Line 64:
	Title II of HIPAA contains seven subtitles. One of the most important for expanding HIPAA is Subtitle F, the Administrative Simplification (AS) provisions, requiring the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers. Title II also addresses the security and privacy of health data, with the intent of improving the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the U.S. health care system.		Title II of HIPAA contains seven subtitles. One of the most important for expanding HIPAA is Subtitle F, the Administrative Simplification (AS) provisions, requiring the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers. Title II also addresses the security and privacy of health data, with the intent of improving the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the U.S. health care system.

			Title III of HIPAA modifies the Internal Revenue Code (IRC) to revise available tax deductions for health insurance, clarify how pre-tax money could be applied health payments, and regulate long-term care services and how they're contracted. Other tax-related issues like IRA distribution and organ donor tax refund payments are covered by this title, in total spread out over eight subtitles.

			Title IV of HIPAA modifies both the IRC and the Public Health Service Act (PHSA) to describe requirements for and enforcement of how group health plans could legally manage and cover patients' pre-existing conditions as well as their continuation of coverage. This information is supplied over two subtitles.

			Title V of HIPAA contains three subtitles that amend the IRC concerning miscellaneous issues such as interest deductions on loans related to company-owned life insurance, how individuals who lose their U.S. citizenship shall be treated tax-wise, and the removal of certain limitations on interest allocation.

	==Enforcement==		==Enforcement==

Shawndouglas: Modified structure

2015-02-12T22:33:34Z

Modified structure

← Older revision		Revision as of 22:33, 12 February 2015
Line 18:		Line 18:

	==Structure==		==Structure==
	HIPAA is divided into five titles:		HIPAA is divided into five titles, each with their own subtitles<ref name="HIPAAGPO" />:

	'''Title I''': Health Care Access, Portability, and Renewability		'''Title I''': Health Care Access, Portability, and Renewability

			:Subtitle A - Group Market Rules
			:Subtitle B - Individual Market Rules
			:Subtitle C - General and Miscellaneous Provisions

	'''Title II''': Preventing Health Care Fraud and Abuse; Administrative Simplification; Medical Liability Reform		'''Title II''': Preventing Health Care Fraud and Abuse; Administrative Simplification; Medical Liability Reform

			:Subtitle A - Fraud and Abuse Control Program
			:Subtitle B - Revisions to Current Sanctions for Fraud and Abuse
			:Subtitle C - Data Collection
			:Subtitle D - Civil Monetary Penalties
			:Subtitle E - Revisions to Criminal Law
			:Subtitle F - Administrative Simplification
			:Subtitle G - Duplication and Coordination of Medicare-Related Plans

	'''Title III''': Tax-Related Health Provisions		'''Title III''': Tax-Related Health Provisions

			:Subtitle A - Medical Savings Accounts
			:Subtitle B - Increase in Deduction for Health Insurance Costs of Self-Employed Individuals
			:Subtitle C - Long-Term Care Services and Contracts
			:Subtitle D - Treatment of Accelerated Death Benefits
			:Subtitle E - State Insurance Pools
			:Subtitle F - Organizations Subject to Section 833
			:Subtitle G - IRA Distributions to the Unemployed
			:Subtitle H - Organ and Tissue Donation Information Included With Income Tax Refund Payments

	'''Title IV''': Application and Enforcement of Group Health Plan Requirements		'''Title IV''': Application and Enforcement of Group Health Plan Requirements

			:Subtitle A - Application and Enforcement of Group Health Plan Requirements
			:Subtitle B - Clarification of Certain Continuation Coverage Requirements

	'''Title V''': Revenue Offsets		'''Title V''': Revenue Offsets

			:Subtitle A - Company-Owned Life Insurance
			:Subtitle B - Treatment of Individuals Who Lose United States Citizenship
			:Subtitle C - Repeal of Financial Institution Transition Rule to Interest Allocation Rules

	===Description===		===Description===
	Title I of HIPAA ~~protects~~ health insurance coverage for workers and their families when they change or lose their jobs.		Title I of HIPAA contains three subtitles that protect health insurance coverage for workers and their families when they change or lose their jobs.

			Title II of HIPAA contains seven subtitles. One of the most important for expanding HIPAA is Subtitle F, the Administrative Simplification (AS) provisions, requiring the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers. Title II also addresses the security and privacy of health data, with the intent of improving the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the U.S. health care system.

	Title II of HIPAA, known as the Administrative Simplification (AS) provisions, requires the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers.<ref>{{cite web \|url=http://www.cms.gov/HIPAAGenInfo/ \|title=Overview HIPAA - General Information \|publisher=Centers for Medicare and Medicaid Services \|accessdate=28 February 2012}}</ref> Title II also addresses the security and privacy of health data, with the intend of improving the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the U.S. health care system.

	==Enforcement==		==Enforcement==