AMIA Comments on HIPAA Privacy Rule Accounting of Disclosures NPRM

AMIA has commented on a recent HHS notice of proposed rulemaking (NPRM) to modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule's standard for accounting of disclosures of protected health information. The purpose of the modifications spelled out in the NPRM is, in part, to implement the statutory requirement under the HITECH Act to require covered entities and business associates to account for disclosures of protected health information to carry out treatment, payment, and health care operations if such disclosures are through an electronic health record.

In the comments, AMIA president and CEO Ted Shortliffe writes that while "recognizing that [HHS] has the authority to make significant changes to the HIPAA rules, AMIA believes that the assumptions made by HHS in delineating a new right to an access report are fundamentally incorrect." Click the link below to read AMIA's full comments.