HIPAA Changes in the HITECH Act of 2009: Education on Health Information Privacy

House bill Sec. 4403
Senate bill Sec. 13403
Conference agreement Sec.
13403

This text is from the Conference Committee Report

Current Law

The Privacy Rule promulgated pursuant to HIPAA requires
each covered entity to designate a privacy official for the
development and implementation of its policies and
procedures.

House Bill

Within six months of enactment, the House bill would
require the Secretary to designate a privacy advisor in each
HHS regional office to offer education and guidance to
covered entities and business associates on their federal
health information privacy and security rights and
responsibilities. Within 12 months of enactment, OCR would be
required to develop and maintain a national education program
to educate the public about their privacy rights and the
potential uses of their PHI.

Senate Bill

Same provision.

Conference Agreement

Same provision.