nhia logo

Quick Links
Search NHIA.org

HIPAA Final Omnibus Rule Resource Center

Welcome to the NHIA member resource center on the Final Omnibus Rule for the Healthcare Insurance Portability and Accountability Act of 1996 (HIPAA).

The final omnibus HIPAA rule was published on Jan. 25, 2013. This rule implements modifications to the HIPAA regulations that were enacted as part of the Health Information Technology for Economic and Clinical Health Act (the HITECH Act) in 2009. This final rule became effective on March 26, 2013, and compliance with the final rule is required by September 23, 2013.

NHIA has engaged its Outside Legal Counsel & Policy Advisor, Alan Parver (and his firm, Polsinelli Shughart) to provide NHIA the following summaries on the HIPAA Final Omnibus Rule:

  • A brief overview of key modifications to HIPAA made by the final rule and a list of suggested action items that HIPAA Covered Entities and Business Associates should take to comply with the final rule. This brief also discusses the changes to the Enforcement Rule, which sets forth the possible consequences a Covered Entity or Business Associate may face if they do not comply with the HIPAA regulations, as modified by the final rule.

    Click here for a summary on the HIPAA Final Omnibus Rulemembersonly
  • An overview of the expansion of, clarifications to, and explicit inclusion of certain entities in the definition of a business associate. This document also reviews the direct liability that the Final Rule imposes on business associates for noncompliance. Lastly, the brief describes the elements that the Final Rule requires be included in business associate agreements and the compliance dates related to these new obligations.

    Click Here for Changes Affecting Who is a Business Associate and New Business Associate Obligations membersonly
  • An overview of the Final Rule's modifications to the Breach Notification Rule; and suggested action items to comply with the Breach Notification Rule by September 23, 2013.

    Click Here for Modifications to the Breach Notification Rule membersonly
  • An overview of the Final Rule's changes related to marketing, research, fundraising and sale of protected health information.

    Click Here for Uses and Disclosures of Protected Health Information Under the Final Review membersonly
  • An overview of the Final Rule's changes related to expansion of certain individual rights, including the right to access protected health information (PHI) maintained electronically and the right to restrict disclosures to health plans when paying out of pocket..

    Click Here for Changes to Patients' Rights Under the Final Rule membersonly

This NHIA member resource center provides educational and reference materials available from NHIA and other sources on the HIPAA Final Omnibus Rule. Check back periodically for updates to this NHIA resource center.