Monday, August 3, 2009

HHS Sec. Delegates Admin. & Enforce. Authority to OCR

Here is the Announcement from OCR concerning HHS delegation of privacy administration and enforcement to the Office of Civil Rights To save time, and get directly to the Federal Register, click the title above.

"Announcement

"Monday, August 3, 2009

"Secretary Delegates HIPAA Security Rule to OCR

"On August 3, 2009 OCR announced that the Secretary of Health and Human Services has delegated to the Director of OCR the authority to administer and enforce the HIPAA Security Rule. This action by Secretary Sebelius will improve HHS’ ability to protect individuals’ health information by combining the authority for administration and enforcement of the Federal standards for health information privacy and security called for in the HIPAA.

The transition of authority for the administration and enforcement of the Security Rule is expected to be seamless with no interruption in the management or processing of any complaints filed prior to the transition. Consumers may continue to submit HIPAA security complaints using the on-line resource – the Administrative Simplification Enforcement Tool (ASET), found at https:htct.hhs.gov/aset. New security complaints may also be sent to the Office for Civil Rights. For more information and detailed instructions on how to submit a complaint to OCR, visit the OCR website: http://www.hhs.gov/ocr/privacy/hipaa/complaints/. The transition of security complaints from CMS to OCR has no impact on how complaints about Transactions and Codes Sets or Unique Identifiers are filed or processed. CMS retains its enforcement authority for these other HIPAA rules.

:View the Federal Register notice of the Delegation of Authority at http://www.hhs.gov/ocr/privacy/srdelegationofauthority2009.pdf and the Secretary’s press release at http://www.hhs.gov/news/press/2009pres/08/20090803a.html."

1 comment:

Online HIPAA Security Training said...

Thank you for providing this useful information. Although there are civil and criminal penalties for noncompliance of HIPAA enforcement, there is growing seriousness about enforcing HIPAA. The new enforcement rule emphasizes HHS’s desire to correct violations informally without levying penalties. Generally, though, if willful neglect is demonstrated, civil penalties are likely to be levied.