A federal court last week voided certain provisions in a 2013 rule modifying the HIPAA privacy, security and enforcement rules under the Health Information Technology for Economic and Clinical Health Act and Genetic Information Nondiscrimination Act, the Department of Health and Human Services’ Office for Civil Rights announced today. In a case challenging provisions that cover an individual’s access to protected health information, the court vacated the “third-party directive” within the individual right of access “insofar as it expands the HITECH Act’s third-party directive beyond requests for a copy of an electronic health record with respect to [protected health information] of an individual … in an electronic format,” OCR said. In addition, the fee limitation set forth in those provisions will apply only to an individual’s request for access to their own records, not to an individual’s request to transmit records to a third party, the agency said. 

Related News Articles

Headline
The Department of Health and Human Services Tuesday reminded health care providers that HIPAA privacy rules bar them from giving media and film crews access to…
Headline
Members of the Partnership to Amend 42 CFR Part 2, including the AHA, today urged the Department of Health and Human Services to issue a rule as soon as…
Headline
The Department of Health and Human Services’ Office for Civil Rights yesterday said it generally will not impose penalties for HIPAA rule violations on health…
Headline
The Department of Health and Human Services' Office for Civil Rights April 3 warned HIPAA-covered entities of an individual posing as an OCR investigator…
Headline
To support federal public health authorities and agencies in need of COVID-19-related data, the Health and Human Services Office for Civil Rights will not…
Headline
The Partnership to Amend 42 CFR Part 2, a coalition of nearly 50 health care organizations including the AHA, applauded Congress’ important step to …