The Health and Humans Services' Office for Civil Rights (OCR) has proposed changes to HIPAA in accordance with the new HITECH provisions that would allow healthcare consumers to request reports detailing who has accessed their health records. The changes would split the privacy rule into two separate rights, reports InformationWeek, "an individual's right to an accounting of disclosures" and "individual's right to an access report, which would include electronic access by both workforce members and persons outside the covered entity." Currently, covered entities are required to track access to records but not required to provide that information to users, the report states. The lead author of the proposed rule, Adam Greene, offers advice and analysis in a GovInfoSecurity podcast. The OCR will take comments on the proposal until July 31.
If you want to comment on this post, you need to login.