Earlier today, the Department of Health and Human Services announced proposed modifications to the HIPAA Privacy Rules, calling them the most significant changes in HIPAA since 2003, when the HIPAA Security Rules were adopted. The propose changes include:
- provisions extending the applicability of certain of the Privacy and Security Rules’ requirements to the business associates of covered entities;
- establishing new limitations on the use and disclosure of protected health information for marketing and fundraising purposes;…