Under the HIPAA rule, HHS allowed third parties, such as insurers and law firms, to make requests on a patient’s behalf for medical records. The rule also had limits on the amount that these third parties could be charged.
Ciox Health, a record retrieving company, filed a lawsuit last year. The company argued that the government overstepped. Judge Amit Mehta agreed, citing that the rule allowing third-party requests for patient records goes beyond what is stored in an EHR. Additionally, Mr. Mehta ruled that the payment standards do not follow the guidelines of the Administrative Procedure Act.
This ruling comes after HHS finalized a rule on Jan. 25 that would modify HIPAA’s Right of Access provision. Now, hospitals and health systems must provide patients, on an individual basis, a copy of their medical records in a timely manner and without a big cost burden. Fee limitations for copies of medical records will now only apply to individual requests and does not apply to a patient’s request to transmit records to a third party.
More articles on cybersecurity:
Health systems should update computer systems in wake of Iran tensions, H-ISAC says
3 cybersecurity predictions for 2020
Former NYC hospital employee pleads guilty to hacking coworkers’ emails
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
