HHS Issues Proposed Updates to HIPAA Privacy Rule

The Department of Health and Human Services (HHS) has issued a proposed rule that would make certain changes to the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule.

The proposed changes are intended to:

  • Support individuals’ engagement in their care;
  • Remove barriers to coordinated care; and
  • Reduce regulatory burdens on the healthcare industry.

The HIPAA Privacy Rule protects the privacy of patient’s personal health information (PHI) but is balanced to ensure that appropriate use and disclosure of information remains necessary during a public health emergency. It applies to covered entities, including both self-funded and fully insured health plans, healthcare clearinghouses and most healthcare providers.

The HHS is requesting comments regarding the provisions, which are due 60 days after the proposed rule is published in the Federal Register. If finalized, the provisions in the final rule would take effect 60 days after publication. Covered entities would generally have 180 days from the effective date to comply.

The proposed rule has yet to be finalized, as comments are still to be considered. Trust our team to keep you informed of ongoing change. In the meantime, click here for additional information.


Should you have any questions, please do not hesitate to reach out to your Creative Benefits Team at 866-306-0200 or solutions@creativebenefitsinc.com.