HHS Provides Model HIPAA Notices for Healthcare Plans and Providers

The U.S. Department of Health and Human Services (HHS) has made available a series of model Notices of Privacy Practices for health care providers and health plans. Changes to privacy regulations known as the HIPAA/HITECH Omnibus Final Rule went into effect in late March 2013. The safe harbor compliance period ends on September 23, 2013. Among other changes, the Omnibus Rule requires that health plans and healthcare providers notify individuals about their privacy rights regarding their personal health information. In addition, individuals have a right to be informed about their health plans’ and healthcare providers’ privacy practices.