Providers may share a deceased patient’s PHI with family members or others who were involved in their care or payment, limited to what’s relevant and never against the patient’s known wishes. The Final Rule’s change, with examples.
The Final Rule limits Privacy Rule protection of a deceased person’s PHI to 50 years after death. Why HHS chose 50 years, how stricter state laws still apply, and why it isn’t a record-retention requirement.
What every business associate contract must include under the Final Rule: permitted uses, required safeguards, breach reporting, subcontractor terms, and return or destruction of PHI at termination, plus the alternatives for government entities.
A covered entity may share PHI with a business associate once it has written assurance the PHI will be protected. The Final Rule extends that chain to subcontractors: each business associate must get the same assurances from its own.
A covered entity or business associate can’t sell PHI without patient authorization. What counts as a “sale” under the Final Rule (including licenses and nonfinancial perks), what doesn’t, and the exceptions for research, public health, and mergers.
March 6, 2013. Today, we continue going through the HIPAA Privacy Rule, section by section, as modified in the Final Rule: Modifications to the HIPAA Privacy, Security, Enforcement, and Breach
March 5, 2013. Today, we continue going through the HIPAA Privacy Rule, section by section, as modified in the Final Rule: Modifications to the HIPAA Privacy, Security, Enforcement, and Breach
March 4, 2013. Today, we start going through the HIPAA Privacy Rule, section by section, as modified in the Final Rule: Modifications to the HIPAA Privacy, Security, Enforcement, and Breach
March 1, 2013. Today, we continue to examine definitions pertaining to the HIPAA Privacy Rule, for which we shall begin to examine modifications next week. Today’s definition is marketing,
Today, we continue to examine definitions pertaining to the HIPAA Privacy Rule, for which we shall begin to examine modifications of provisions next week. Today’s definition is health care
February 27, 2013. Today, we start to examine definitions pertaining to the HIPAA Privacy Rule, and begin with payment, as modified in the Final Rule: Modifications to the HIPAA Privacy,
February 26, 2013. Today, we examine the HIPAA Rules enforcement role established by the HITECH Act for State attorneys general as modified in the Final Rule: Modifications to the HIPAA
