HITECH privacy rule to be released next month

As called for under the Health Information Technology for Economic and Clinical Health (HITECH) Act, the Health & Human Services Department plans to release in May a proposed rule that strengthens existing privacy, security and enforcement requirements for organizations that handle patients' health information.

The rule also toughens related provisions in the Health Insurance Portability and Accountability Act (HIPAA) as the adoption of electronic health records and health information exchange expands the number of organizations that may have access to personal data. The proposed rule focuses on the liability of business associates of healthcare providers and plans; new limitations on the sale of protected health information; and stronger individual rights to access electronic medical records and restrict the disclosure of certain information, HHS has said