Overview of Modifications to the HIPAA Privacy, Security, and Enforcement Rules

Health Reform - Epstein Becker Green

Our colleagues Mark E. Lutes, Robert J. Hudock, and Patricia M. Wagner have issued an alert on modifications to the HIPAA privacy, security, and enforcement rules. Following is an excerpt:

On January 17, 2013, the Department of Health and Human Services released the highly anticipated, 563 page, Health Insurance Portability and Accountability Act (“HIPAA”) regulations (the “Final Rule”) that have been delayed for over 3 years. The Final Rule will be published in the Federal Register on January 25, 2013. The Final Rule addresses many of the compliance issues and unanswered questions facing covered entities and business associates. The effective date of the Final Rule is March 26, 2013--with a compliance date (for most provisions) by September 23, 2013 (there is an additional grace period for certain provisions). Epstein Becker Green is preparing an in-depth analysis of the Final Rule which will be forthcoming. In the meantime, below is a high level summary of the significant changes included in the Final Rule.  Read the full alert here.

Note that Ms. Wagner and Mr. Hudock will host a free webinar on this topic, titled "The Final Omnibus HIPAA Rule," on January 24, at 12:00 p.m. EST.

Poorly Crafted Wellness Programs Could Make Employers Sick

Kara Maciel, Member of the Epstein Becker Green Labor and Employment, Litigation, and Health Care and Life Sciences Practices, was recently interviewed by Employment Law360 concerning employer wellness programs

According to the article, businesses are turning to wellness programs to curb health care expenses, but programs that aren't carefully crafted can open employers up to costly privacy and discrimination litigation, attorneys say.  Wellness programs can lead to big savings for employers by targeting behaviors that can cause conditions that drive up their health care expenditures. But programs that give employers too much  information about their employees can leave employers vulnerable to claims that they have violated the  Health Insurance Portability and Accountability Act, the Americans with Disabilities Act, the Genetic Information Nondiscrimination Act, and state privacy and nondiscrimination laws, experts say. 

“Employers really can open themselves up to a litigation minefield if they do not properly craft their programs in a legally compliant way, with a particular focus on discrimination and privacy issues,” said Maciel. 

Click here to download the Employment Law360 article in its entirety (PDF).