If passed, the revised Rule would allow people to obtain this information by requesting an access report, which would document the particular persons who electronically accessed and viewed their PHI.
Although covered entities are currently required by the HIPAA Security Rule to track access to ePHI, they are not required to share this information with people.
“This proposed rule represents an important step in our continued efforts to promote accountability across the health care system, ensuring that providers properly safeguard private health information,” said HHS’ Office for Civil Rights Director Georgina Verdugo, in a news release. “We need to protect peoples’ rights so that they know how their health information has been used or disclosed.”
View the proposed rule by clicking here (pdf).
Read the HHS news release about the proposed change to the HIPAA Privacy Rule.
Related Articles on HIPAA:
Omnibus HIPAA Final Rule Will Not Mandate Encryption of Personal Health Information
10 Critical Social Media Guidelines for Surgery Center Physicians and Staff
HHS Inspector General finds Security Concerns Abound
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.