[Med-privacy] HPP urges DHHS to strengthen enforcement of the HIPAA Privacy Rule

[pmarshall]

       Subject:
                 [healthprivacy-news] HPP urges DHHS to strengthen
enforcement of the HIPAA Privacy Rule
       Date:
                 Thu, 20 Nov 2003

In a November 2003 editorial, the Health Privacy Project urged the
Department of Health and Human Services to strengthen the
enforcement of the HIPAA Privacy Rule.  In order to ensure that
consumers' rights are protected, HPP recommends that:

- HHS should conduct periodic compliance reviews of covered entities.

- HHS should step up its public education regarding individual rights
under the Privacy Rule

- HHS should provide a detailed report annually to Congress of all
complaints filed and how they have been resolved, as well as account for

the agency's enforcement activities that are not "complaint driver,"

- Individuals should have the opportunity to participate in hearings
regarding their complaints.

- The Privacy Rule should be amended to allow people the right to sue in
federal court for alleged violations. Congress and the Executive
Branch should monitor state lawsuits brought by people who believe that
the Privacy Rule was violated.

The editorial is available at iHealthBeat, a free daily digest by the
California Health Care Foundation reporting the Internet's impact on
health care.
http://ihealthbeat.org/members/basecontent.asp?contentid=26011&datevalue=11/19/2003&collectionid=541&program=13&contentarea=105238

To view the page, you must register by providing your name,
organization, industry and address.

For any questions please contact Katharina Kopp, Program Manager
(202-721 5614 or kkopp@healthprivacy.org), or Janlori Goldman, Director
(202-721 5632 or jgoldman@healthprivacy.org), of the Health Privacy
Project.