Health Care Client Alert: HHS Issues HIPAA Omnibus Final Rule

    22 January 2013

    New HIPAA/HITECH Rules Bring Few Surprises, but Still Call for Sweeping Changes in Compliance Program

    More than two-and-a-half years after issuing proposed regulations under the Health Information Technology for Economical and Clinical Health (HITECH) Act, on January 17, 2013, HHS released a series of final changes to its Privacy, Security, Breach Notification and Enforcement Rules promulgated under the Health Insurance Portability and Accountability Act (HIPAA). While the agency also supports changes required by the Genetic Information Nondiscrimination Act (GINA), the long-awaited final rules show little change over its proposals, other than a notable update to the Breach Notification Rule.