Guidance is Released for HITECH Act Implementation
May 1, 2009 · Posted in New Legislation · Comment
The FTC has released a proposed breach notification rule in connection with personal health records, as part of its obligations under the new privacy provisions of the HITECH Act.
In addition, HHS has issued proposed regulations and request for comments on the HITECH Act. The HHS document addressed the meaning of “unsecured” in connection with the breach notification requirements under the HITECH Act. Essentially, the categories of “secured” information involve encryption and “destroyed” information. In the document, HHS also seeks comments on several significant issues related to the new breach notification requirements.




