HHS Issues Final HIPAA Regulations Incorporating HITECH Act and GINA
HHS issued a long-awaited set of final regulations regarding the changes that were made to HIPAA by the HITECH Act (from 2009) and GINA (from 2008). The final regulations also address changes that have been made to HIPAA’s enforcement rules. Employer group health plans (among other covered entities) will generally be required to modify all existing business associate agreements to incorporate the items addressed in these final regulations. Importantly, the deadline for making the required changes to business associate agreements is September 23, 2013.