Latest Changes in Site

August 3, 2010 — Report on Patient Privacy

The August issue of Report on Patient Privacy has been posted.

July 6, 2010 — Report on Patient Privacy

The July issue of Report on Patient Privacy has been posted.

June 1, 2010 — Report on Patient Privacy

The June issue of Report on Patient Privacy has been posted.

May 27, 2010 — Revised Content

Narrative Sections
New Section (42), Business Associates combines Privacy Section (10) and Security Section (25) and adds the HITECH requirements that apply to business associates.

Government Documents
Links have been updated
New documents have been added
Draft Risk Assessment Guidance, OCR
Safeguarding Health Information, OCR, NIST (conference materials)

May 3, 2010 — Report on Patient Privacy

The May issue of Report on Patient Privacy has been posted.

April 1, 2010 — Report on Patient Privacy

The April issue of Report on Patient Privacy has been posted.

March 3, 2010 — Report on Patient Privacy

The March issue of Report on Patient Privacy has been posted.

February 19, 2010 — Revised Content

• Privacy (6) Patients’ Rights
• ¶1300 Added cross-references
• ¶1321 Updated this section to reflect the restrictions on PHI that the covered entity must agree to as of Feb. 17, 2010
• ¶1329 Updated the policy and procedure on Requesting Restrictions on Uses and Disclosures to state the restrictions the covered entity must comply with
• ¶1330 Incorporates the HITECH Act’s extension of an individual’s access to PHI to the electronic health record
• ¶1335 Adds electronic health records to the discussion of fees
• ¶1350 Updates section with HITECH requirement for accounting of disclosures from electronic health record
• ¶1353.2 Incorporates the two processes from the HITECH Act that covered entities may use to comply with the EHR accounting for disclosures requirement
• ¶1360 Updates the individual rights checklist with HITECH requirements

• Privacy (7) Uses and Disclosures of PHI
• ¶1529 Updated policy and procedure on use and disclosure of PHI when no payment is involved
• ¶1530 This new section summarizes the HITECH Act prohibition on selling PHI or electronic health records.

• Privacy (10) Business Associates
• ¶3500 Added citation to the HITECH breach enforcement rule to business associate note

• Privacy (12) Marketing and Fundraising
• Updated the entire section, including policies and procedures with the HITECH provisions, effective Feb. 17, 2010

• Security (25) Business Associates
  • ¶2100 Added citation to the HITECH breach enforcement rule to business associate note