Specifically, the OCR’s proposed rule seeks to expand the accounting provision and provide individual patients with an “access report,” which would outline who has accessed their electronic health record. The agency also seeks specific modifications to the existing accounting requirements to “improve its workability and effectiveness.”
Read the OCR’s proposed rule on disclosures of protected health information (pdf).
Related Articles on Security:
Key Compliance Considerations When Implementing EMRs
Omnibus HIPAA Final Rule Will Not Mandate Encryption of Personal Health Information
HHS Inspector General: Security Concerns Abound in Rush to Deploy EHRs
