Covered entities are health care providers that transmit health information in electronic transactions directly or through others; clearinghouses; and health plans.
The mega rule requires covered entities to make changes to the Notice of Privacy Practices by Sept. 23, 2013. For most medical practices, the additions to the Notice are:
- Describe the types of uses and disclosures of protected health information that require an authorization. For example, the Notice must be clear that the patient must authorize the use of their information for marketing by third parties like pharmaceutical companies.
- Clarify that the patient will receive notice of any breach of privacy or security for their protected health information.
To hear more detail about these changes, participate live in the Searfoss Consulting Group's Gimme 15 Minutes webinar on March 20. Registration is free. Or download the podcast available on March 21 to listen at any time! For the slides used in the presentation, you need to participate live or purchase the archive.
