March 25, 2009 / Law Alert

HITECH Act Brings New Vigor to HIPAA's Privacy and Security Rules

The Health Information Technology for Economic and Clinical Health Act (HITECH Act), recently signed into law, modifies HIPAA's Privacy and Security Rules. The HITECH Act places additional obligations on entities traditionally covered under HIPAA and extends the new rules to traditional business associates. Specifically, the HITECH Act sets forth new rules regarding notification of data breaches and accounting and reporting requirements for data disclosures. All entities traditionally covered under HIPAA, and companies doing business with and for those entities, should be aware of the new obligations set forth in the HITECH Act. Read the full Law Alert.