Changes to HIPAA Privacy and Security Contained in the HITECH Act of 2009

Part of the American Recovery and Reinvestment Act of 2009-- Signed into Law on February 17, 2009

Full text of the legislative changes to HIPAA

Index to the Conference Committee Report by Topic

Definitions

Application of Security Provisions and Penalties to Business Associates of Covered Entities

Notification in the Case of Breach

Education on Health Information Privacy

Application of Privacy Provisions and Penalties to Business Associates of Covered Entities

Restrictions on Certain Disclosures and Sales of Health Information; Accounting of Certain Protected Health Information Disclosures; Access to Certain Information in Electronic Format

Conditions of Certain Contacts as Part of Health Care Operations

Temporary Breach Notification Requirement for Vendors of Personal Health Records and Other Non-HIPAA Covered Entities

Business Associate Contracts Required for Certain Entities

Clarification of Application of Wrongful Disclosures Criminal Penalties

Improved Enforcement

Audits

Special Rule for Information to Reduce Medication Errors and Improve Patient Safety

Relationship to Other Laws

Effective Date

Studies, Reports, Guidance