Home > Information > latest Capital Checkup > Back Issues > Capital Checkup

May 8, 2003

HHS ISSUES FIRST INSTALLMENT OF HIPAA ENFORCEMENT RULE

On April 17, 2003, the U.S. Department of Health and Human Services (HHS) published an interim final rule establishing procedures that will govern enforcement of the Administrative Simplification standards of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The Office for Civil Rights (OCR) within HHS is responsible for enforcement of the privacy rule. Enforcement of the remaining HIPAA standards rests with the Centers for Medicare & Medicaid Services (CMS), also within HHS.

It is important to note that the scope of this new rule is quite limited. The preamble reiterates HHS's general approach to enforcement - seeking voluntary compliance, providing technical assistance, responding to complaints, and resolving complaints through informal means. The rule itself establishes procedural rules for investigations and the imposition of civil monetary penalties by HHS. The rule does not include any substantive provisions governing the imposition of civil monetary penalties (such as the criteria that HHS will use to assess whether a penalty will be imposed); nor does it deal with criminal penalties, which will be handled by the Department of Justice.

The procedures set out in this interim rule apply to investigations by HHS (including investigational subpoenas and inquiries) and the imposition of civil monetary penalties by HHS (including hearings before administrative law judges conducted at the request of a "covered entity" as a result of a proposed civil monetary penalty).

This interim final rule will be in effect for only four months: between May 19, 2003, and September 16, 2003. HHS states in the rulemaking that it will issue a more detailed rule by September 16, 2003. This more detailed rule will include substantive provisions impacting the imposition of civil monetary penalties, as well as revisions to this procedural rule. Comments on the interim final rule are due by June 16, 2003, and will be considered by HHS as it prepares the second installment of the Enforcement Rule.

The interim final rule can be found in the April 17, 2003 issue of the Federal Register, which is available in PDF format by clicking here.

 

Capital Checkup is The Segal Company's periodic electronic newsletter summarizing activity in Washington with respect to health care and related subjects. Capital Checkup is for informational purposes only. It is not intended to provide guidance on current laws or pending legislation. On all issues involving the interpretation or application of laws and regulations, plan sponsors should rely on their attorneys for legal advice.

Back to Top