InfoLaw Alert: HHS Issues Proposed Mofications to HIPAA Security and Privacy Rules

The Department of Health and Human Services released proposed modifications to the privacy and security rules related to HIPAA.  We are still reading through the 234 page document, but it appears that the new rules expand HIPAA responsibilities for business associates.  In addition, HHS has set up a web portal that provides a summary of the breaches reported to HHS.  There is a 60 day comment period on this proposed rule change.  More to come from the Information Law Group in the coming days.