Lexology May 3, 2023
In 2023, the Department of Health and Human Services (HHS) is expected to finalize proposed modifications to its regulations under the Health Insurance Portability and Accountability Act of 1996, as modified by the Health Information Technology for Economic and Clinical Health Act of 2009 (HIPAA). If HHS finalizes its proposed modifications as written, covered entities and business associates will need to make significant revisions to their HIPAA privacy compliance policies and other documents within 180 days of HHS’ final rulemaking.
Covered entities and business associates should take steps now to plan and prepare for the first significant HIPAA privacy changes in over a decade.
Background
In January 2021, HHS released a Proposed Rule entitled “Proposed Modifications to the HIPAA Privacy...