United States Government Publishing Office publisher pbl distributor dst United States National Archives and Records Administration Office of the Federal Register author aut Government Organization text government publication eng FR Regulatory Information 2009_register executive 2009-08-25 article Part II Rules and Regulations D09002ee1c80406b1 D09002ee1c8040838 United States Department of Health and Human Services originator org United States Government Agency or Subagency United States Office of the Secretary originator org United States Government Agency or Subagency The Department of Health and Human Services (HHS) is issuing this interim final rule with a request for comments to require notification of breaches of unsecured protected health information. Section 13402 of the Health Information Technology for Economic and Clinical Health (HITECH) Act, part of the American Recovery and Reinvestment Act of 2009 (ARRA) that was enacted on February 17, 2009, requires HHS to issue interim final regulations within 180 days to require covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and their business associates to provide notification in the case of breaches of unsecured protected health information. For purposes of determining what information is "unsecured protected health information," in this document HHS is also issuing an update to its guidance specifying the technologies and methodologies that render protected health information unusable, unreadable, or indecipherable to unauthorized individuals. 74 FR 42740 https://www.govinfo.gov/app/details/FR-2009-08-24/E9-20169 E9-20169 FR24AU09-10 RIN 0991-AB56 4153-01-P https://www.govinfo.gov/app/details/FR-2009-08-24/E9-20169 https://www.govinfo.gov/content/pkg/FR-2009-08-24/html/E9-20169.htm https://www.govinfo.gov/content/pkg/FR-2009-08-24/pdf/E9-20169.pdf Administrative Practice and Procedure Computer Technology Electronic Information System Electronic Transactions Employer Benefit Plan Health Health Care Health Facilities Health Insurance Health Records Hospitals Investigations Medicaid Medical Research Medicare Penalties Privacy Reporting and Recordkeeping Requirements Security 31 p. 42740 42770 74 FR 42740 Title 45 Part 160 45 CFR Part 160 Title 45 Part 164 45 CFR Part 164 RIN 0991-AB56 Breach Notification for Unsecured Protected Health Information; Federal Register Vol. 74, Issue RULE E9-20169 II DEPARTMENT OF HEALTH AND HUMAN SERVICES Office of the Secretary 2009-09-23 4153-01-P E9-20169 Interim final rule with request for comments.

The Department of Health and Human Services (HHS) is issuing this interim final rule with a request for comments to require notification of breaches of unsecured protected health information. Section 13402 of the Health Information Technology for Economic and Clinical Health (HITECH) Act, part of the American Recovery and Reinvestment Act of 2009 (ARRA) that was enacted on February 17, 2009, requires HHS to issue interim final regulations within 180 days to require covered entities under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and their business associates to provide notification in the case of breaches of unsecured protected health information. For purposes of determining what information is "unsecured protected health information," in this document HHS is also issuing an update to its guidance specifying the technologies and methodologies that render protected health information unusable, unreadable, or indecipherable to unauthorized individuals.

Effective Date: This interim final rule is effective September 23, 2009. Andra Wicks, 202-205-2292. Administrative Practice and Procedure Computer Technology Electronic Information System Electronic Transactions Employer Benefit Plan Health Health Care Health Facilities Health Insurance Health Records Hospitals Investigations Medicaid Medical Research Medicare Penalties Privacy Reporting and Recordkeeping Requirements Security Breach Notification for Unsecured Protected Health Information , Sherette.funncoleman@hhs.gov DataLossdb.org http://datalossdb.org/ http://sba.gov/idc/groups/public/documents/sba_homepage/serv_sstd_tablepdf.pdf http://www.bls.gov/oes/ http://www.bls.gov/oes/current/oes_nat.htm http://www.csrc.nist.gov/ http://www.datalossdb.org http://www.hhs.gov/ocr/privacy/ http://www.nacds.org/wmspage.cfm?parm1=507 http://www.regulations.gov http://www.sba.gov/advo/research/data.html Vol. 74, no. 162 Office of the Federal Register, National Archives and Records Administration 2009-08-24 continuing daily deposited born digital 206 p. Table of Contents: AE 2.7: GS 4.107: AE 2.106: KF70.A2 https://www.govinfo.gov/app/details/FR-2009-08-24 P0b002ee180025c11 0097-6326 0042-1219 0364-1406 769-004-00000-9 000582072 f:FR24AU09 https://www.govinfo.gov/app/details/FR-2009-08-24 https://www.govinfo.gov/content/pkg/FR-2009-08-24/pdf/FR-2009-08-24.pdf https://www.govinfo.gov/content/pkg/FR-2009-08-24/xml/FR-2009-08-24.xml fdlp 42573 42770 DGPO 2009-08-25 2024-06-04 FR-2009-08-24 machine generated eng FR FR-2009-08-24 74 162