New HIPAA Regulations Regarding Security Breaches
The U.S. Department of Health & Human Services has issued regulations expanding the obligations of employers, Covered Entities and Business Associates when a Breach occurs releasing Unsecured Protected Health Information (UPHI) inappropriately. The regulations are available at the Department of Health & Human Services website here. All employers with HIPAA Security Policies and Procedures need to update those Policies to include the new definitions and rules requiring notification of affected employees, the media and the U.S. Department of Health & Human Services when UPHI is impermissibly released. The changes are highly technical, but have an effective date of September 23, 2009. If you have any questions, contact Harley Bjelland at hbjelland@cdflaborlaw.com.