OCR today issued a “HITECH Act Rulemaking and Implementation Update ” on its Web site, confirming it expects to release proposed rules regarding privacy and security provisions of HITECH.
OCR did not say when it will release the rules, but said on its Web site it will release the provisions through will through notice and comment rulemaking.
These provisions include:
- Business associate liability
- New limitations on the sale of protected health information, marketing, and fundraising communications
- Stronger individual rights to access electronic medical records and restrict the disclosure of certain information