HIPAA

See also: Medical Records / Privacy / Medical Research / Public Health Privacy

Official HHS Site

NEW! Guidance on Communications with Family, Friends, or Others Involved in a Patient's Care - September 16, 2008

• Patient Guide: When Health Care Providers May Communicate About You with Your Family, Friends, or Others Involved in Your Care
• Provider Guide: Communicating with a Patient's Family, Friends, or Others Involved in a Patient's Care

OCR Summary of the HIPAA Privacy Rule - April 11, 2003

HIPAA Privacy Rule: Disclosures for Emergency Preparedness - A Decision Tool - 19 July 2006

Health Information: First-Year Experiences Under the Federal Privacy Rules. GAO-04-965, September 3, 2004 - (12 meg pdf)

Kentucky AG Opinion 04-ORD-143, August 24, 2004, In re: The Kentucky Enquirer/Covington Police Department, Open Records Decision, The question presented in this appeal is whether the Covington Police Department properly relied on KRS 61.878(1)(a) and the Health Insurance Portability and Accountability Act of 1996 in partially denying The Kentucky Enquirer’s requests for specifically identified accident and incident reports generated by that public agency. For the reasons that follow, we find that the department’s partial denial of these requests was procedurally deficient and substantively incorrect.

Seventh Circuit rules in the DOJ suit (Northwestern Hospital v. Ashcroft) to get abortion records, finds that HIPAA does not import state medical records privacy protections into federal law claims in federal court.

Maryland federal district court rules on HIPAA in discovery in litigation.

HIPAA and State Freedom of Information Laws - Texas Open Records Decision No. 681 Re: Questions concerning the applicability of the HPAA Privacy Rule and state law to health information subject to the Public Information Act, chapter 552 of the Texas Government Code (ORQ-65). Also see FOIA

OCR/HIPAA Privacy/Security/Enforcement Regulation Text August 2003 - Standards for Privacy of Individually Identifiable Health Information Regulation Text; Security Standards for the Protection of Electronic Protected Health Information; General Administrative Requirements Including, Civil Money Penalties: Procedures for Investigations, Imposition of Penalties, and Hearings (This is the republished combined rules and amendments.) Previous version - Standards for Privacy of Individually Identifiable Health Information (Unofficial Version) (45 CFR Parts 160 and 164) Regulation Text (December 28, 2000) as amended: Part 160 (May 31, 2002) Parts 160, 164 (August 14, 2002) - Original register posting - Standards for Privacy of Individually Identifiable Health Information - final rule - 82462 Federal Register / Vol. 65, No. 250 / Thursday, December 28, 2000

Guidance on the application of HIPAA to public health information - HIPAA Privacy Rule and Public Health - Guidance from CDC and the U.S. Department of Health and Human Services

Guidance on general application of HIPAA - Office for Civil Rights - HIPAA - Medical Privacy - National Standards to Protect the Privacy of Personal Health Information - OCR Guidance Explaining Significant Aspects of the Privacy Rule - December 4, 2002, Revised April 3, 2003. OCR Privacy Rule Summary - Last Revised 05/03

Guidance on application of HIPAA to medical research - Protecting Personal Health Information in Research: Understanding the HIPAA Privacy Rule - revised 09/08/2003 (adds reference to IRB and HIPAA document), previous version - RTF for editing

Guidance on application of HIPAA to IRBs - Institutional Review Boards and the HIPAA PRIVACY RULE

Information for covered entities and researchers on authorizations for research uses or disclosures of protected health information, with forms - RTF for editing

HHS Powerpoint Presentation on the Privacy Rule and Research (in pdf format)

Covered Entity Flow Chart - are you a covered entity?

NIH - Certificates of Confidentiality

Statutory Confidentiality Protection of Research Data - Subject: Statutory Confidentiality Protection of Identifiable Research Data Collected with AHRQ Support

Standards for a Release of Substance Abuse Records - M.A.K. v. Rush-Presbyterian-St.-Luke's Medical Center, 198 Ill.2d 249, 764 N.E.2d 1, 261 Ill.Dec. 710 (Ill. 2001)

Essay on the Original Regulations - 12th hour Rules on Patient Privacy Raise Concerns for Providers

Public Law 104–191—Aug. 21, 1996 Health Insurance Portability and Accountability Act of 1996