HIPAA Omnibus - Sep 23, 2013

On September 23 2013, HIPAA Omnibus becomes enforceable.  The practices we have helped get ready for this deadline have found the requirements pretty straight forward.  Here are the main areas addressed by the new rule:

- Revisions to the Notice of Privacy Practices
- Revisions to the Business Associate Agreements
- Prohibitions on sale of protected health information
- The right to restrict disclosures to a health plan when services are paid for out-of-pocket
- The new breach risk assessment provisions
- Patients' ability to request a copy of their electronic medical record in electronic format


The Office for Civil Rights (OCR) has published a YouTube video summarizing the requirements for HIPAA Omnibus rule.