HHS Releases Final Rule on HIPAA Breach Notification and Business Associate Requirements

On January 17, 2013, the Department of Health and Human Services Office for Civil Rights (“OCR”) released a final rule updating several provisions the Health Insurance Portability and Accountability Act (“HIIPAA”) regulations.  The final rule becomes effective on March 26, 2013.  However, HIPAA covered entities and business associates will have until September 23, 2013, to comply with the new regulations. The final rule includes enhanced protections and modifies the “harm standard”. The Blitman & King LLP Employee Benefits Team will be conducting a thorough review of this new rule and will provide more detail concerning its content and implications to employee benefit plans in the near future.