Health IT Security June 29, 2022
HIPAA-covered entities must navigate HIPAA compliance along with recently introduced federal and state data privacy standards, creating significant challenges and complexity.
Along with HIPAA’s requirements for safeguarding protected health information (PHI), HIPAA-covered entities also must pay close attention to the patchwork of federal and state data privacy laws that dictate how different types of consumer data are treated.
In most cases, HIPAA preempts certain elements of state-level consumer data privacy laws—particularly if HIPAA’s standards are more stringent than those of the law in question.
However, these exemptions do not mean that the laws never apply to health data, especially health data held by non-HIPAA-covered entities. Healthcare companies, HIPAA-covered entities, and business associates must all navigate the complex and often...