2020-27157: Proposed Modifications to the HIPAA Privacy Rule To Support, and Remove Barriers to, Coordinated Care and Individual Engagement

Summary

The United States Department of Health and Human Services (HHS or "the Department") is issuing this Notice of Proposed Rulemaking (NPRM) to modify the Standards for the Privacy of Individually Identifiable Health Information (Privacy Rule) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act). These modifications address standards that may impede the transition to value-based health care by limiting or discouraging care coordination and case management communications among individuals and covered entities (including hospitals, physicians, and other health care providers, payors, and insurers) or posing other unnecessary burdens. The proposals in this NPRM address these burdens while continuing to protect the privacy and security of individuals' protected health information.

The agency’s own summary, as published.

What this changes

Amends 2 parts of the Code of Federal Regulations — the standing rules this notice rewrites.

• 45 CFR 160 General Administrative Requirements
• 45 CFR 164 Security and Privacy