HCAA Event: HIPAA Amendments in Federal Stimulus Bill Alter Healthcare Compliance Landscape

The recent American Recovery and Reinvestment Act of 2009 (more commonly referred to as “the Federal Stimulus Bill”) altered the healthcare compliance landscape, specifically with respect to HIPAA compliance.

Among the notable changes that healthcare compliance professionals must be aware of as a result of the Federal Stimulus Bill’s HIPAA ammendments:

• Business associates have been added to the list of parties that must comply with HIPAA’s Privacy and Security Standards. Associates are also now subject to civil and criminal liability. HIPAA’s requirements now are applicable to health care providers, health plans, health care clearinghouses and their business associates.
• Protected health information (PHI) standards have been made more stringent. Sale of PHI is prohibited without prior written consent of the subject of the information. Additional restrictions and regulations have been placed on other certain uses and disclosures of PHI.
• Covered entities are required to provide specific notifications when a data breach of PHI occurs. These notifications must go to both the individuals whose PHI was breached, as well as to the U.S. Department of Health and Human Services Office of Civil Rights.
• State Attorney Generals can now sue for civil damages when a breach of HIPAA’s Privacy or Security Standards damages citizens in their state.

To assist in the understanding and future compliance with the new HIPAA standards, the Health Care Compliance Association recently announced a two-part web conference focused entirely on the HIPAA Amendments in the Federal Stimulus Bill.

(And for the record, we do not have an explicit relationship with the HCCA, nor did they approach us about posting this information. But for all of the healthcare compliance professionals who read CCI, this is a tremendous resource that we endorse.)

Here is the basic information about the HCAA web conference:

• What: Two-part web conference on HIPAA Amendments in Federal Stimulus Bill
• Who: Health Care Compliance Association (HCCA)
• Part 1: Learn about Blockbuster Changes to HIPAA Privacy and Security Rules (March 30, 2009 at 12:00 pm CT, 90 minutes)
• Part 2: Immediate Action Items You Need to Implement (April 9, 2009 at 12:00 pm CT, 90 minutes)
• Where: Learn more at official web conference page at HCCA-info.org

Here are the official descriptions about the HIPAA Amendement web conferences from the HCCA:

PART 1:

President Obama’s Stimulus Bill (The American Recovery and Reinvestment Act of 2009) contains provisions that could mean significant changes to your compliance program:

• Business Associates will now have to fully comply with HIPAA privacy and security rules in the same manner as the “Covered Entities” that they serve (e.g., hospitals, physicians and health plans)
• Requires Breach Notification
• Increases fine and penalties
• Changes to CMPS: $100 up to $25,000 / $1,000 up to $100,000 / $10,000 up to $250,000 / $50, 000 up to $1,500,000

Just when you thought you had your privacy and security program under control, think again. There are major changes to Privacy and Security in the American Recovery and Reinvestment Act. If you want to learn about these significant changes to the rules and how they will impact your organization, sign up to listen to this important audio conference.

PART 2:

• What will it require to implement the breach notification provisions?
• What do these changes mean for you and your business associates?
• Should we expect increased enforcement and what does that mean to our programs?
• Where will we go from here?

Join us for this 90-minute Web conference to learn important information and action requirements you need to know about how to implement the significant changes made to Privacy and Security in the new Federal Stimulus Bill, American Recovery and Reinvestment Act.

A couple of other related links on this topic as well:

Analysis of Changes to HIPAA in Stimulus Bill — (Health Law News and Notes)

Stimulus Bill Brings New HIPAA Requirements — (K&L Gates)

Tags: hcca, Healthcare Compliance, hipaa, stimulus bill