OCR seeks input on implementing HITECH Act security practices, penalties

The Department of Health and Human Services’ Office for Civil Rights yesterday requested public input on how HIPAA covered entities and business associates are implementing recognized security practices under the Health Information Technology for Economic and Clinical Health Act, and any implementation issues they would like OCR to clarify through future guidance or rulemaking. The agency also seeks input on ways to share civil money penalties collected through enforcement with individuals harmed by violations of the HIPAA rules.