HIPAA Breach Rule Update—Discount for ANCOR Members

Gilliland & Markette in partnership with ANCOR has developed materials to assist providers comply with the HIPAA Breach Notification Rule. It is a 40+ page document consisting of comprehensive Questions & Answers concerning the Rule, a template Breach Notification Policy, sample breach notification language for business associate contracts, and a copy of the Breach Notification Rule, itself.

The price is $49.50; however, ANCOR members are eligible for a 10% discount. You can order by phone at (800) 894-1243 with a credit card. Just tell the folks at Gilliland & Markette that you are an ANCOR member.

Gilliland & Markette LLP
3905 Vincennes Road, Suite 204
Indianapolis, Indiana 46268

Telephone: (317) 704-2400
Toll Free: (800) 894-1243
Fax: (317) 704-2410
Mail to: thefirm@gillilandmarkette.com
http://www.gillilandmarkette.com
Read more!

HIPAA: HHS Issues Rule Requiring Individuals Be Notified of Breaches of Their Health

The breach notification notice of proposed rule making requires HIPAA covered agencies to give notification to affected individuals of breaches of unsecured protected health information (PHI). Business associates of HIPAA covered agencies are required to notify the agency following discovery of a breach of unsecured protected health information maintained by the business associate. The requirement for breach notification applies only to breaches of “unsecured protected health information,” which means PHI that has not been secured by use of a technology or methodology specified in guidance of the Secretary of HHS. That guidance essentially requires encryption or destruction of the PHI. The rule is effective September 23, 2009. However, HHS specifically states, "...we will use our enforcement discretion to not impose sanctions for failure to provide the required notification for breaches that are discovered before 180 calendar days from the publication of this rule, or February 22, 2010. During this initial time period - after this rule has taken effect but before we are imposing sanctions - we expect covered entities to comply with this subpart and will work with covered entities, through technical assistance and voluntary corrective actions, to achieve compliance." ANCOR is working to develop products and other information to assist members with this new development.
Read more!

HHS Delegates Authority for the HIPAA Security Rule to Office for Civil Rights

HHS Secretary Kathleen Sebelius announced that the Office for Civil Rights (OCR) will take over from the Centers for Medicare & Medicaid Services (CMS) authority for the administration and enforcement of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The switch is to eliminate duplication and increase efficiency in how health information privacy is protected. Read more!