important hipaa milestones
HIPAA Timeline
The Health Insurance Portability and Accountability Act of 1996 was introduced to improve health insurance coverage for workers changing employment and set standards for the privacy and security of health information and electronic transactions. The Act has been instrumental in ensuring the privacy of Americans is better protected. There have been numerous updates to the legistation over the years to increase privacy protections and healthcare data security. This infographic shows the key milestones in the history of HIPAA.
The Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services has imposed a civil money penalty of $2,154,000 against Jackson Health System (JHS) for violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security and Breach Notification Rules between 2013 and 2016.
Cloud Service Provider that are used to create, receive, maintain, or transmit ePHI, are considered Business Associates
Now must fully comply with Omnibus Rules
Omnibus Rule goes into effect and healthcare industry given 6 months to fully comply
The HHS releases the Omnibus Final Rule. This rule includes changes to HIPAA from the HITECH Act of 2009
Addressed:
- Business associate liability
- Genetic information in underwriting
- Sale of Protected Health Information
- Marketing
- Breach Notification Rules and updates
Health Net is fined $250,00 for loss of unencrypted hard drive
HITECH can be enforeced and new penalties can be applied.
Former employee of UCLA HealthCare plead guilty and sentenced to 4 months in jail for violating HIPAA by accessing and reading private health information
Incentives to encourage the uses of electronic health records (particularly in Physician Offices. Also introduced a new tier structure of penalties for violations.
Security Rule for small health plans went into effect
Enforcement Rule goes into effect
Enforcement was to be in the purview of the Office of Civil Rights.
Privacy rule went into effect
The Final Security was published
Set national standards for the protection of individually identifiable health information whether in oral, written, or electronic format.
The Privacy Rule is proposed to improve privacy standards and to restrict the disclosure of Protected Health Information and personal identifiers to unauthorized individuals.
Patients will also be given better access to their health data.
President Bill Clinton signed the Kennedy-Kassabaum Bill into law, which became the Health Insurance Portability and Accountability Act