This Article  • Full text  • PDF  • Send to a friend  • Save in My Folder  • Save to citation manager  • Permissions  Citing Articles  • Citation map  • Citing articles on HighWire  • Citing articles on Web of Science (45)  • Contact me when this article is cited  Related Content  • Related article  • Similar articles in JAMA  Topic Collections  • Medical Practice  • Law and Medicine  • Alert me on articles by topic  Social Bookmarking   What's this?

Regulations Under the Health Insurance Portability and Accountability Act

Lawrence O. Gostin, JD,LLD

JAMA. 2001;285:3015-3021.

Health information privacy is important in US society, but existing federal and state law does not offer adequate protection. The Department of Health and Human Services, under powers granted by the Health Insurance Portability and Accountability Act of 1996, recently issued a final rule providing systematic, nationwide health information privacy protection. The rule is extensive in its scope, applying to health plans, health care clearinghouses, and health care providers (hospitals, clinics, and health departments) who conduct financial transactions electronically ("covered entities"). The rule applies to personally identifiable information in any form, whether communicated electronically, on paper, or orally. The rule does not preempt state law that affords more stringent privacy protection; thus, the health care industry will have to comply with multiple layers of federal and state law. The rule affords patients rights to education about privacy safeguards, access to their medical records, and a process for correction of records. It also requires the patient's permission for disclosures of personal information.

While privacy is an important value, it may conflict with public responsibilities to use data for social goods. The rule has special provisions for disclosure of health information for research, public health, law enforcement, and commercial marketing. The privacy debate will continue in Congress and within the president's administration. The primary focus will be on the costs and burdens on health care providers, the ability of health care professionals to use and share full medical information when treating patients, the provision of patient care in a timely and efficient manner, and parents' access to information about the health of their children.

Author Affiliation: Center for Law and the Public's Health at Georgetown University Law Center, Washington, DC, and Johns Hopkins School of Public Health, Baltimore, Md.

CiteULike    Connotea    Del.icio.us    Digg    Reddit    Technorati    Twitter     What's this?

RELATED ARTICLE

June 20, 2001
JAMA. 2001;285(23):3035-3036.
EXTRACT | FULL TEXT  

THIS ARTICLE HAS BEEN CITED BY OTHER ARTICLES

How does national culture affect citizens' rights of access to personal health information and informed consent?
Cockcroft et al.
Health Informatics Journal 2009;15:229-243.
ABSTRACT  

Research on medical records without informed consent.
Miller
J Law Med Ethics 2008;36:560-566.
 

Promoting Regular Mammography Screening I. A Systematic Assessment of Validity in a Randomized Trial
del Junco et al.
JNCI J Natl Cancer Inst 2008;100:333-346.
ABSTRACT | FULL TEXT  

Does One Person Provide It All? Primary Support and Advanced Care Planning for Women With Cancer
Dizon et al.
JCO 2007;25:1412-1416.
ABSTRACT | FULL TEXT  

Ethics Manual: Fifth Edition
Snyder et al.
ANN INTERN MED 2005;142:560-582.
ABSTRACT | FULL TEXT  

Angiotensin converting enzyme (ACE) gene polymorphisms and lupus disease severity: a promising link
Saeed et al.
Ann Rheum Dis 2005;64:164-165.
FULL TEXT  

Developing a System to Assess the Quality of Cancer Care: ASCO's National Initiative on Cancer Care Quality
Schneider et al.
JCO 2004;22:2985-2991.
FULL TEXT  

Suicide Attempt Due to a Misunderstood HIPAA Notice
GLEASON and YATES
Am. J. Psychiatry 2004;161:374-374.
FULL TEXT  

Privacy in Psychiatric Treatment: Threats and Responses
Appelbaum
Focus 2003;1:396-406.
ABSTRACT | FULL TEXT  

The Use of Medical Records in Research: What Do Patients Want?
Kass et al.
J Law Med Ethics 2003;31:429-433.
 

Ethical, Legal, and Social Implications of Genomic Medicine
Clayton
NEJM 2003;349:562-569.
FULL TEXT  

Privacy in Psychiatric Treatment: Threats and Responses
Appelbaum
Am. J. Psychiatry 2002;159:1809-1818.
ABSTRACT | FULL TEXT  

Medical Informatics: Improving Health Care Through Information
Hersh
JAMA 2002;288:1955-1958.
FULL TEXT  

Ethics in epidemiology and public health II. Applied terms
McKeown and Weed
J. Epidemiol. Community Health 2002;56:739-741.
ABSTRACT | FULL TEXT  

Research and Human Subjects
Rivara
Arch Pediatr Adolesc Med 2002;156:641-642.
FULL TEXT  

Pharmacogenetic Challenges For The Health Care System
Robertson et al.
Health Aff (Millwood) 2002;21:155-167.
ABSTRACT | FULL TEXT  

Sacred Secrets -- The Privacy of Medical Records
Welch
NEJM 2001;345:371-372.
FULL TEXT