hipaa-privacy · US Department of Health and Human Services · Rule · Published 2006-02-16 · Effective 2006-03-16 · 71 FR 8390
Document
Document number
06-1376
Federal Register citation
71 FR 8390
CFR reference
45 CFR 160
Type
Rule
Action
Final rule.
Category
hipaa-privacy
Sub-agency
US Department of Health and Human Services
Publication date
2006-02-16
Effective date
2006-03-16
Abstract
The Secretary of Health and Human Services is adopting rules for the imposition of civil money penalties on entities that violate rules adopted by the Secretary to implement the Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191 (HIPAA). The final rule amends the existing rules relating to the investigation of noncompliance to make them apply to all of the HIPAA Administrative Simplification rules, rather than exclusively to the privacy standards. It also amends the existing rules relating to the process for imposition of civil money penalties. Among other matters, the final rule clarifies and elaborates upon the investigation process, bases for liability, determination of the penalty amount, grounds for waiver, conduct of the hearing, and the appeal process.