Skip to main content

Tougher HIPAA Rules around HITECH

BayBiotech.NET
The Health Information Technology for Economic and Clinical Health Act ( HITECH), intended to promote adoption of information technology for maintenance of electronic health records and incorporated into the American Recovery and Reinvestment Act of 2009, was signed into law on Feb. 17, 2009. The key points of the provisions are:
1. Tracking the medical information disclosure: According to the new legislation, physicians will be required to track any disclosure of a patient's medical information. Previously regulations allowed physicians to disclose patient information for the purpose of treatment, billing or health care, but they were not required to track when that information was disclosed. This provision kicks in for current users on Jan. 1, 2014, and then patients will be able to request an accounting of disclosures of their electronic personal health information three years from the date of the request, potentially dating back to 2011.

2. Rules regarding security breaches new legislation require practices to post information about security breaches if a breach affects 10 or more patients. If a security breach affects 500 or more patients, practices must notify all of their patients, a local media outlet, and the HHS secretary. New enforcement also escalates the fines for the security breaches ranging anywhere between $100- $1.5 million.
Thus the new legislation provides more control to the patients over the handling of their health care records, but increases the costs and risks for a health care facility for protecting the health information. This will also mean that health care facilities will have to spend more resources and develop infrastructure to keep the electronic health care records secure. This regulation also opens avenues for the emergence of contract health care management facilities that can be used to outsource handling of the patient’s health care information and thus will help save resources and will keep the costs manageable for the health care facilities.
(Ref: www.hhs.gov/ocr/hipaa/)

Comments

Popular posts from this blog

Amendments for High Risk Device Type Regulatory Pathway

BayBiotech.NET Government Accounting Office (“GAO”) has issued a long-awaited report evaluating the use of the 510(k) process by the Food and Drug Administration (“FDA” or the “Agency”) in the January of 2009. Report mainly focused on Preamendment class III devices. Although most high-risk class III medical devices are subject to the demanding premarket approval (“PMA”) process, preamendment class III devices may be cleared through the 510(k) pathway until FDA issues regulations requiring a PMA. Under the Safe Medical Devices Act of 1990, FDA was required either to reclassify preamendment class III devices into class I or II, or (2) issue regulations requiring PMA approval for the devices, GAO noted that 20 preamendment class III device types have not yet been addressed by the Agency. GAO has urged FDA to take required steps to address the remaining class III devices that continue to be eligible for 510(k) review. As a result of the report, FDA has committed to address al...

Harmonization by Doing (HBD): Japan & U.S. Collaboration

BayBiotech.NET HBD is an international cooperative effort by Japan and US for regulatory convergence for Medical Devices. The efforts are focused on to develop global clinical trials and address regulatory barriers for timely device approvals. To address the needs for additional evaluation, the HBD initiative is a pilot project launched jointly by FDA and MHLW-PMDA for the premarket review of device cardiovascular technology. Instead of taking a theoretical approach to harmonization, HBD is focused on Proof of concept by utilizing parallel development, application submissions and review of actual medical device projects. HBD Study intends to collect and analyze regulatory submission data from multiple applications in the U.S. and Japan. The purpose of the study is to further understand differences that may exist with format and content, to define best practices and to improve globally harmonized processes. To read more about the HBD program, follow the link: http://www.fda.gov/M...

510(k) Summary or Statement

BayBiotech.NET A premarket notification from a manufacturer must include either a summary of the 510(k) safety and effectiveness information of the product upon which the substantial-equivalence determination is based or a statement that this information will be made available by the 510(k) applicant to any person within 30 days of a written request. As per FDA definition, these are the definition of Summary and Statements: Summaries are released by FDA regarding a 510(k) clearance when requested under the Freedom of Information (FOI) Act whereas Statements are used to arrange for this FOI request to be fulfilled by the 510(k) applicant. 510(k) Summaries: If a summary is included, it must be submitted with the 510(k) notification as per FDA guidelines. The summary must be complete and correct in order for FDA to complete its review of a 510(k) submission. FDA will accept summaries and amendments until it issues a determination of substantial equivalence. If a summary has be...