DHHS Creates HIPAA Compliance and Enforcement Web Site
The Department of Health and Human Services has launched a new web page designed to provide information regarding compliance with and the enforcement of the HIPAA Privacy Rule. The Privacy Rule is enforced by the Office of Civil Rights and, as noted on the web page, purportedly aims at the protection of the confidentiality of a patient's medical records. The page provides specific case examples, an overview of the enforcement process and highlights from enforcement actions.
Interestingly, since April 14, 2003, 4,447 cases against pharmacy chains, major medical centers, health plans, hospital chains and small provider offices required corrective action, 2,155 of the cases found no violation and the remaining 13,875 of the cases were not eligible for enforcement (most of these cases were dismissed for lack of jurisdiction, failure to timely file or to pursue a complaint, or because the disclosure was permissible). To date, a total of 26,408 complaints have been received, and 22% of the complaints filed remain pending.
