Changes to the HIPAA Privacy Rules – A Primer for Self-Insured Group Health Plans

The Office for Civil Rights of the US Department of Health and Human Services recently released a final rule to update the HIPAA Privacy Rules for reproductive health care information. The Final Rule also updates the Notice of Privacy Practices for both reproductive health care information and for the final rules published earlier this year for the Confidentiality of Substance use Disorder Patient Records – otherwise known as the “Part 2 Rules.” Compliance with the Final Rule is required by December 23, 2024, except for the changes to the Notice of Privacy Practices, the compliance for which is required by February 16, 2026 (which is meant to coincide with the compliance date for the Part 2 Rules).

Click here to read the full post on our ERISA Blog.

close
Loading...
Knowledge assets are defined in the study as confidential information critical to the development, performance and marketing of a company’s core business, other than personal information that would trigger notice requirements under law. For example,
The new study shows dramatic increases in threats and awareness of threats to these “crown jewels,” as well as dramatic improvements in addressing those threats by the highest performing organizations. Awareness of the risk to knowledge assets increased as more respondents acknowledged that their