Take care of patient notices, records and more after HIPAA ‘mega-rule’

Why This Topic Matters

It helps healthcare organizations understand the main operational areas affected by the rule so they can assess current policies, documentation, and staff readiness before compliance deadlines and before a breach or audit creates greater risk.

Article Sections

1. Start with privacy notice

   Discusses updates to the practice privacy notice and related patient notice obligations under the HIPAA rule. It also addresses general record-access communication considerations for current patients.

2. Don’t sweat emailed records

   Covers patient requests for electronic records sent by email and the general handling of associated privacy and communication concerns. The section focuses on disclosure of risk and patient-request documentation.

3. Know the new breach definition

   Summarizes the article’s discussion of the revised breach standard and how it changes breach-risk evaluation. It also notes broader implications for reportable incidents.

4. Liability insurance

   Addresses whether practices should review HIPAA-related insurance coverage and how to think about potential gaps. The section emphasizes evaluating existing policies and coverage terms.

5. Take security seriously

   Focuses on HIPAA security obligations, including risk analysis, risk management, staff training, and appointment of a security officer. It frames these as ongoing operational responsibilities for practices.