In January 2013, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights announced a final rule that implements a number of provisions of the Health Information Technology for Economic and Clinical Health (HITECH) Act, enacted as part of the American Recovery and Reinvestment Act of 2009, to strengthen privacy and security protections for health information established under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

HSS Press Release

Read the Final Rule in the Federal Register (PDF).

The Department of Health & Human Services periodically posts case examples and resolution agreements to demonstrate how entities can effectively comply with the requirements of the Privacy Rule and Security Rules. Please see the HHS website for details.