HHS Wants Comments on HIPAA Changes
"We are looking for candid feedback about how the existing HIPAA regulations are working in the real world and how we can improve them," said OCR Director Roger Severino. "We are committed to pursuing the changes needed to improve quality of care and eliminate undue burdens on covered entities while maintaining robust privacy and security protections for individuals' health information."
The U.S. Department of Health and Human Services' Office for Civil Rights published a Request for Information on Dec. 12, asking for input from the public on how the Health Insurance Portability and Accountability Act (HIPAA) rules, especially the HIPAA Privacy Rule, could be modified to further the HHS secretary's goal of promoting coordinated, value-based health care.
"This RFI is another crucial step in our Regulatory Sprint to Coordinated Care, which is taking a close look at how regulations like HIPAA can be fine-tuned to incentivize care coordination and improve patient care, while ensuring that we fulfill HIPAA’s promise to protect privacy and security,” said Deputy Secretary Eric Hargan, who leads the Regulatory Sprint initiative. "In addressing the opioid crisis, we've heard stories about how the Privacy Rule can get in the way of patients and families getting the help they need. We've also heard how the rule may impede other forms of care coordination that can drive value. I look forward to hearing from the public on potential improvements to HIPAA while maintaining the important safeguards for patients' health information."
HHS developed the HIPAA rules to protect individuals' health information privacy and security interests, while permitting information sharing needed for important purposes. HHS' release says the Office for Civil Rights (OCR) has heard calls in recent years to revisit aspects of the rules that may limit or discourage information sharing needed for coordinated care or to facilitate the transformation to value-based health care.
"We are looking for candid feedback about how the existing HIPAA regulations are working in the real world and how we can improve them," said OCR Director Roger Severino. "We are committed to pursuing the changes needed to improve quality of care and eliminate undue burdens on covered entities while maintaining robust privacy and security protections for individuals' health information."
In addition to requesting broad input on the HIPAA rules, the request seeks comments on specific areas of the HIPAA Privacy Rule, including:
- Encouraging information-sharing for treatment and care coordination
- Facilitating parental involvement in care
- Addressing the opioid crisis and serious mental illness
- Accounting for disclosures of personal health information for treatment, payment, and health care operations as required by the HITECH Act
- Changing the current requirement for certain providers to make a good-faith effort to obtain an acknowledgment of receipt of the Notice of Privacy Practices
Public comments are due by Feb. 11, 2019.