Skip to main content

Tougher HIPAA Rules around HITECH

BayBiotech.NET
The Health Information Technology for Economic and Clinical Health Act ( HITECH), intended to promote adoption of information technology for maintenance of electronic health records and incorporated into the American Recovery and Reinvestment Act of 2009, was signed into law on Feb. 17, 2009. The key points of the provisions are:
1. Tracking the medical information disclosure: According to the new legislation, physicians will be required to track any disclosure of a patient's medical information. Previously regulations allowed physicians to disclose patient information for the purpose of treatment, billing or health care, but they were not required to track when that information was disclosed. This provision kicks in for current users on Jan. 1, 2014, and then patients will be able to request an accounting of disclosures of their electronic personal health information three years from the date of the request, potentially dating back to 2011.

2. Rules regarding security breaches new legislation require practices to post information about security breaches if a breach affects 10 or more patients. If a security breach affects 500 or more patients, practices must notify all of their patients, a local media outlet, and the HHS secretary. New enforcement also escalates the fines for the security breaches ranging anywhere between $100- $1.5 million.
Thus the new legislation provides more control to the patients over the handling of their health care records, but increases the costs and risks for a health care facility for protecting the health information. This will also mean that health care facilities will have to spend more resources and develop infrastructure to keep the electronic health care records secure. This regulation also opens avenues for the emergence of contract health care management facilities that can be used to outsource handling of the patient’s health care information and thus will help save resources and will keep the costs manageable for the health care facilities.
(Ref: www.hhs.gov/ocr/hipaa/)

Comments

Popular posts from this blog

Good Machine Learning Practices

BayBiotech.NET A joint effort by FDA,  United Kingdom’s Medicines and Healthcare products Regulatory Agency (MHRA) and Health Canada have developed guiding principles to help promote utilization of medical devices that are safe and effective and utilize artiificial intelligence and machine learning. To find out more details check out the link here!

Group C (Treatment IND) Drugs

BayBiotech.NET Since 1976, National Cancer Institute (NCI) in agreement with FDA has established the Group C classification system to allow access to certain drugs for the cancer patients specifically falling under a category that adequate alternative therapy or if the available alternative therapy has significant toxic effects. Each Group C drug protocol specifies patient eligibility and drug use information. Group C drugs are provided only to properly trained physicians who have registered themselves with NCI using a special form to assure that their patient qualifies under guidelines - or protocols - for the drug. Physicians using drugs under Group C have no reporting requirements to the NCI other than the obligation to report adverse drug reactions. Group C drugs are provided free of charge, and the Centers for Medicare and Medicaid Services provides coverage for care associated with Group C therapy. Making Group C drugs available to the critically ill patients not only provi...

Risk Based Clinical Monitoring

BayBiotech.NET FDA's recommendation of Risk Based Monitoring of Clinical Trials , as published in their Draft Guidance in August 2011. For the first time, FDA provided guidance on monitoring of clinical investigations in 1988 which was recently withdrawn, stated that the “most effective way” to monitor an investigation was to “maintain personal contact between the monitor and the investigator throughout the clinical investigation.” At the time the guidance was issued, sponsors had only limited ways to effect meaningful communication with investigators other than through on-site visits.   This guidance recommends an assessment by the sponsor for the need of 100% on-site monitoring. Such an assessment may be based on the complexity of the study protocol and not be generally applicable to all trial types. It explains the importance of remote monitoring facilitated by the use of electronic data capture system (EDC) and also emphasizes the need of the identifying crit...