On May 31, the Department of Health and Human Services issued a proposed rule modifying the existing HIPAA privacy rule standard for accounting of disclosures of protected health information. The new proposal would mean that patients could request an access report that documents what entities have electronically accessed and viewed their protected health information. Currently covered entities ( including private practices) are required by the HIPAA security rule to track access to electronic protected health information, but not required to share this information with patients. Stay tuned to find out if/when this proposed rule will go into effect.
As reported by the APTA