Exciting Changes in HIPAA Regulations

On January 25, 2013, the Department of Health and Human Services issued major changes in the HIPAA Privacy Regulations, effective March 26, 2013. These changes include a significant modification to the definition of Protected Health Information whereby "individually identifiable health information of a person who has been deceased for more than 50 years is not protected health information under the Privacy Rule." See p. 5613-5614 of the final rule at http://www.gpo.gov/fdsys/pkg/FR-2013-01-25/pdf/2013-01073.pdf

Archivists with responsibility for records subject to HIPAA are urged to consult with legal counsel regarding the implications of all of the changes. Analysis of these changes will be posted to the HIPAA resource page as it becomes available.

DHHS Press release: http://www.hhs.gov/news/press/2013pres/01/20130117b.html