The Definition of Vendor of Personal Health Records

This posting is one of several that outline the HITECH privacy provisions of the American Recovery and Reinvestment Act that President Obama signed into law on Tuesday, February 17, 2009, in Denver, CO. Here, we reproduce the definitions that appear in Subtitle D—Privacy, Section 13400. Definitions, that appear in the Conference Report on page H1345 of Congressional Record—House, February 12, 2009. These definitions are critical in understanding the content of the new HITECH privacy provisions and how they relate to existing HIPAA Administrative Simplification Privacy Rule standards.

HIPAA Privacy Definitions:

Breach Business Associate Covered Entity Disclosure Electronic Health Record Health Care Operations

Health Care Provider Health Plan National Coordinator Payment Personal Health Record Protected Health Information

Secretary Security State Treatment Use Vendor Of Personal Health Records

VENDOR OF PERSONAL HEALTH RECORDS

The term ‘vendor of personal health records’ means an entity, other than a covered entity (as defined in paragraph (3)), that offers or maintains a personal health record.