When the House of Representatives votes on a revamped version of the 21st Century Cures bill, the legislation will not have a contested provision calling for changes to the HIPAA Privacy Rule, GovInfoSecurity reports. The provision would have eliminated the need for patient authorization to use their personal health information for research purposes. "The current bill actually removes the two worst privacy provisions in the original legislation — the research provision, which would have had substantial unintended consequences, and a provision related to sale of PHI, which would have allowed drug companies to buy PHI simply by calling it [a] form [of] research purposes," said Wiley Rein Partner Kirk Nahra, CIPP/US. Meanwhile, the Department of Health and Human Services is warning health care organizations to be on the lookout for a phishing email campaign mimicking HIPAA compliance audit communications from HHS' Office for Civil Rights.
If you want to comment on this post, you need to login.