With the compliance deadline for the new HIPAA Omnibus Rule rapidly approaching, HealthITSecurity reports that one critical area “that may fly under the radar” is new requirements for an organization’s notice of privacy practices for protected health information (PHI). Other than healthcare clearinghouses, correctional institutions and group health plans not touching PHI, the Office for Civil Rights says organizations must make the notices available upon request and prominently post them on their websites. Covered entities must also provide such information to patients during their first service encounter, the report states.
Full Story