On April 6, 2022, the Office of Civil Rights published a Request for Information (RFI) related to certain provisions of the Health Information Technology for Economic and Clinical Health (HITECH). The request includes 30 specific questions. Entities may choose to answer all or just some of the questions.
Specifically, OCR would like to hear how covered entities and business associates are complying with HIPAA’s Security rules related to the safeguarding of electronic PHI. Under those rules, entities are not required to utilize encryption but must consider and address the security of electronic PHI in a reasonable manner. OCR would like information on the standards, guidelines, best practices, methodologies, procedures, and processes the entity has considered, implemented, and plans to implement.
OCR is also considering compensating individuals who are harmed by an act that constitutes a violation of the HITECH Act. Such individuals could receive a percentage of any civil penalties or monetary settlement collected by OCR related to the violation. Harm may include physical, financial, and reputational harm or harm that hinders one’s ability to obtain health care. OCR is requesting information on how to define compensable harm.
Comments are due by June 6, 2022.
OCR Request for Information, HITECH »
PPI Benefit Solutions does not provide legal or tax advice. Compliance, regulatory and related content is for general informational purposes and is not guaranteed to be accurate or complete. You should consult an attorney or tax professional regarding the application or potential implications of laws, regulations or policies to your specific circumstances.
Sign up to have it delivered straight to your inbox.
Sign up