[Med-privacy] Draft HIPAA Enforcement Rule

[Peter Marshall]

*** HHS Publishes Draft HIPAA Enforcement Rule ***

The Department of Health and Human Services today published in the 
Federal Register a Notice of Proposed Rulemaking (NPRM) of the HIPAA 
Enforcement Rule. Comments from the public are requested, and are due 
by June 17. The proposed rule, entitled, "Civil Money Penalties: 
Policies and Procedures for Investigations, Imposition of Penalties, 
and Hearings," would amend the existing rules relating to the 
investigation of noncompliance to make them apply to all of the HIPAA 
Administrative Simplification rules, rather than exclusively to the 
Privacy standards. It would also amend the existing rules relating to 
the process for imposition of civil money penalties. Among other 
matters, the proposed rules would clarify and elaborate upon the 
investigation process, bases for liability, determination of the 
penalty amount, grounds for waiver, conduct of the hearing, and the 
appeal process.

[....]

Read the full text of the HIPAA Enforcement Rule NPRM:
http://www.hipaadvisory.com/regs/enforcement/nprm.pdf