Friday, September 25, 2009

HIPAA Breach Notification Rule

New regulations effective September 23, 2009 require all physicians who are covered by HIPAA to notify patients if there are breaches of security involving their medical information. The linked guidance from the AMA summarizes the new requirements. These requirements apply in addition to any notification obligations imposed by state law. These requirements also supplement the obligations imposed by the HIPAA Privacy and Security Rules.

No comments: