iDrinker Biddle & Reath released a client alert summarizing some of the highlights of the HIPAA Omnibus Rule, released by the Department of Health and Human Services (HHS) on Thursday. A few items of note:
- The definition of protected health information has been amended so as to exclude information on a person who has been deceased for more than 50 years.
- The rule expands the definition of “business associate” to include additional entities and clarifies that business associates are directly liable under HIPAA.
- Covered entities will have to modify their Notice of Privacy Practices.
- Patients are provided additional rights under the final rule. Marketing standards are strengthened.
A copy of the client alert can be found here. In the coming weeks, we will be publishing a series of client alerts addressing in more depth specific provisions of the Final Rule. Stay tuned for more information.
