We use cookies to customise content for your subscription and for analytics.
If you continue to browse Lexology, we will assume that you are happy to receive all our cookies. For further information please read our Cookie Policy.
Lexology logo
  Request new password

Search results

Order by most recent / most popular / relevance

Results: 1-10 of 58

Life’s a breach, part II: Omnibus Rule revises what constitutes a breach under the HIPAAHITECH breach notification requirements

  • Alston & Bird LLP
  • -
  • USA
  • -
  • May 8 2013

HIPAA's "Omnibus Rule" (also referred to in this advisory as the "Rule"), published on January 25, 2013, modified many parts of the HIPAA

HIPAA, mental health, and the national instant criminal background check system

  • Alston & Bird LLP
  • -
  • USA
  • -
  • April 23 2013

In the aftermath of such incidents as the shootings at Virginia Tech and Newtown, HHS published guidance to remind covered entities that health care

HIPAAHITECH Act Omnibus Rule checklist

  • Alston & Bird LLP
  • -
  • USA
  • -
  • February 1 2013

This checklist is a tool to assist covered entities, business Associates and subcontractor business Associates to plan their implementation of the

Certification programs for health information technology are here

  • Alston & Bird LLP
  • -
  • USA
  • -
  • March 12 2010

On March 10, 2010, the Office of the National Coordinator (ONC) published its Proposed Rule establishing certification programs for health information technology (HIT) in the Federal Register

HIPAAHITECH Act privacy rule coming in July 2012?

  • Alston & Bird LLP
  • -
  • USA
  • -
  • June 7 2012

In March, we reported that the U.S. Department of Health and Human Services (HHS) had submitted the HIPAAHITECH Act Omnibus Final Rule to the Office of Management and Budget (OMB) for review under Executive Order 12866, and that OMB had up to 90 days to review the rule under the Executive Order

Life’s a breach: what constitutes a breach under the HIPAA HITECH breach notification requirements

  • Alston & Bird LLP
  • -
  • USA
  • -
  • September 9 2009

On August 24, 2009, the Department of Health and Human Services (HHS) published in the Federal Register its interim final rule (the "Breach Regulations") requiring notification of breaches of unsecured protected health information (PHI) by covered entities and their business associates under the Health Insurance Portability and Accountability Act (HIPAA

HHS approves first EHR testing and certification bodies

  • Alston & Bird LLP
  • -
  • USA
  • -
  • August 30 2010

HHS has approved the Certification Commission for Health Information Technology (CCHIT) and the Drummond Group to test and certify electronic health records (EHRs) under the EHR temporary certification program

The HITECH Act: business associates now directly covered by HIPAA

  • Alston & Bird LLP
  • -
  • USA
  • -
  • June 26 2009

The recent economic stimulus legislation, the American Recovery and Reinvestment Act (ARRA), has been the subject of much political debate

ONC issues final rule establishing a temporary certification program for HIT

  • Alston & Bird LLP
  • -
  • USA
  • -
  • June 18 2010

The Office of the National Coordinator issued a final rule this morning establishing the temporary certification program for purposes of testing and certifying health information technology (HIT

HIPAA covered health plans beware: HHS Office for Civil Rights kicks off HIPAA Audit Program

  • Alston & Bird LLP
  • -
  • USA
  • -
  • March 7 2012

Since November 2011, the U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), has been conducting audits of covered entities (the “HIPAA Audit Program”) for compliance with the privacy and security requirements under HIPAA and the HITECH Act (collectively, the “Privacy & Security Rules”