Search Results

The default setting for search results displays All Content. If you prefer to see recent content only, please adjust the date filter.

302 Results Found

News

HIPAA proposed rule would prohibit certain reproductive health care disclosures 

The Department of Health & Human Services’ Office for Civil Rights today released a proposed rule that would prohibit entities regulated by the HIPAA Privacy Rule from using or disclosing protected health information to investigate or prosecute patients, providers or others involved in providing legal reproductive health services.
Special Bulletin
Member

HHS Finalizes Changes to Information-sharing Requirements for Addiction Treatment

The HHS Office for Civil Rights and the Substance Abuse and Mental Health Services Administration Feb. 8 finalized modifications of certain provisions of part 2 of title 42 of the Code of Federal Regulations, commonly known as 42 CFR Part 2 (or Part 2), to align requirements for patient records regarding treatment for substance use disorder (SUD) with those in effect under the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule.
Letter/Comment
Public

AHA Comments on Proposed HIPAA Transaction Standards for Health Care Attachments

AHA comments on the proposed Standards for Health Care Attachments Transactions and Electronic Signatures, and Modification to Referral Certification and Authorization Transaction Standard.
Testimony
Public

AHA House Statement on "ERISA’s 50th Anniversary: The Path to Higher Quality, Lower Cost Health Care"

AHA comments in response to the House Committee on Education and the Workforce efforts to build upon and strengthen the Employee Retirement Income Security Act (ERISA).
Special Bulletin
Member

Recommendations for Hospitals Following a Cyberattack

The AHA has developed a series of recommendations for hospitals and health systems should they experience a cyberattack in their organization or with a third-party vendor. Hospitals and health systems should consult with their leadership and IT professionals to determine which if any course of action to take following a cyberattack.
News

CISA releases proposed rule on cyber incident reporting

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency March 27 released a proposed rule implementing cyber incident and ransom payment reporting requirements under the Cyber Incident Reporting for Critical Infrastructure Act of 2022, intended to help the agency prevent cyberattacks and deploy assistance to victims.
News

HHS releases video on documenting recognized HIPAA security practices

The Department of Health and Human Services’ Office for Civil Rights yesterday released a video on recognized security practices under the HIPAA security rule and how covered entities may demonstrate implementation.
Initiatives/Campaigns

#MyWhy Campaign

As a physician, nurse, respiratory therapist, environmental services or food services worker or other health care professional, your example is one of the strongest health resources we have. When you get your COVID-19 vaccine, please consider sharing your story to help others understand the importance of getting vaccinated.
News

OCR reminder: HIPAA rules apply to online tracking technologies

HIPAA-regulated entities are not permitted to use online tracking technologies in a manner that would result in impermissible disclosures of protected health information to tracking technology vendors or any other violation of the HIPAA rules, HHS' Office for Civil Rights reminded covered entities and business associates in a bulletin yesterday.
News

AHA to court: Revised OCR bulletin on online tracking technologies still unlawful

The Department of Health and Human Services’ revised “bulletin” for HIPAA covered entities and business associates using online tracking technologies only confirms that the original bulletin was “substantively and procedurally unlawful,” AHA April 11 told a federal court hearing its challenge to a bulletin issued by HHS’ Office for Civil Rights that restricts health care providers from using standard third-party web technologies that capture IP addresses on portions of their public-facing webpages.