|The Health Insurance Portability and Accountability
HIPAA REGULATIONS: PRIVACY RULE
This rule provides individuals with significant control over their health information. As a result, patients can request restrictions on the use and disclosure of their health information, have the right to review and copy their medical records, and can request that appropriate amendments or corrections be made to their medical records.
Additionally, the rule balances public responsibility with privacy protections by setting boundaries on medical record use and release. Specifically, healthcare providers and health plans must inform patients and/or plan members of their business practices concerning the use and/or disclosure of health information. The rule further ensures the security of personal health information by requiring covered entities to adopt written privacy procedures, train their employees in these privacy procedures and designate a privacy officer.
Currently, the DHHS has proposed modifications to this
standard that strengthen notice provisions while also removing consent
requirements that were felt to hinder necessary access to care. In their
current form these proposed modifications also maintain the minimum necessary
rule, allow for treatment related conversations, assure appropriate parental
access to minors records, prohibit the use of records for marketing purposes,
assure privacy without impeding research, provide model business associate
provisions and simplify authorization requirements.