Health & Welfare

Increased Penalties for HIPAA Noncompliance

HHS has issued final regulations containing inflation adjustments to the civil penalties for violations of HIPAA's "administrative simplification" rules.

HHS Guidance on When One Health Plan May Share PHI of Individuals with Another Health Plan

HHS has issued FAQs that provide guidance on the circumstances under which HIPAA's Privacy Rule allows for one health plan to share protected health information ("PHI") about individuals who "have a relationship" with a second health plan. Background. HIPAA's Privacy Rule allows a covered entity ("CE"), including a health plan, to disclose PHI to another CE for either: (i) the health plan's own ...

HHS Reduces Maximum Penalty Amounts for Certain HIPAA Violations

The Department of Health and Human Services ("HHS") has lowered the maximum civil monetary penalty amounts for most violations of the Health Insurance Portability and Accountability Act ("HIPAA") Privacy and Security Rules. Background. In 2009, Congress enacted the Health Information Technology for Economic and Clinical Health ("HITECH") Act that, among other things, enhanced HIPAA enforcement by ...