Four Key Areas of the New HIPAA Privacy Regulations

On January 25, 2013, the Health Insurance Portability and Accountability Act (''HIPAA'') regulations (the ''Omnibus Rule'') implementing the statutory amendments under the Health Information Technology for Economic and Clinical Health Act (''HITECH Act'') were published in the Federal Register. The Omnibus Rule is effective March 26, 2013, but covered entities and business associates have until September 23, 2013, to comply with most of the new requirements. In addition to a number of administrative requirements (such as the requirement that a Covered Entity modify its Notice of Privacy Practices), the Omnibus Rule likely is to have its greatest impact in the four areas discussed below.