Security Rule

The Health Insurance Portability and Accountability Act of 1996 (HIPPA) Security Rule establishes national standards to protect individuals’ electronic personal health information that is created, received, used, or maintained by a covered entity. The final rule became effective on April 21, 2003 and HIPPA covered entities were required to comply with the regulations by April 21, 2005 with the exceptions of small health plans. Small health plans compliance date was extended until April 21, 2006. The final rule adopts standards for the security of electronic protected health information to be implemented by health plans, health care clearinghouses, and certain health care providers. The ultimate goal for this rule was to improve the Medicare and Medicaid programs, and other Federal health programs and private health programs, and the effectiveness and efficiency of the health care industry in general by establishing a level of protection for certain electronic health information.

References

• Centers for Medicare and Medicaid Services. (2003). Health Insurance Reform: Security Standards. Federal Register , 68 (34), 8333-8381.