HIPAA Omnibus Final Rule

Updated HIPAA Compliance Forms and Policies

The HIPAA Omnibus Final Rule, which implements changes made by the Health Information Technology for Economic and Clinical Health (HITECH), greatly enhances a patient’s privacy protections, provides individuals new rights to their health information, and strengthens the government’s ability to enforce the law. The rule became effective March 26, 2013, but generally gave providers until September 23, 2013, to become compliant and revise and redistribute notices of privacy practices (NNP).

The changes in the final rulemaking provide the public with increased protection and control of personal health information. The HIPAA Privacy and Security Rules to date have focused on health care providers, health plans and other entities that process health insurance claims. The rule implements legislative changes that expanded many of the privacy requirements to business associates of these entities that receive protected health information, such as contractors and subcontractors.

Some of the largest breaches reported to HHS have involved business associates. Penalties have been increased for noncompliance based on the level of negligence, with a maximum penalty of $1.5 million per violation. The changes also strengthen the HITECH Breach Notification requirements by clarifying when breaches of unsecured health information must be reported to HHS.

  • Familiarize yourself with the HIPAA Omnibus Final Rule and any updates thereafter.
  • Ensure your business partners are also in compliance with the HIPAA Omnibus Final Rule.
  • Review your Professional Liability Insurance Policy to see if you have protection for expenses related to a breach or violation of HIPAA.

NASW Assurance Services’ enhanced Professional Liability Insurance Policy now covers certain HIPAA-related claims by automatically including $25,000 for HIPAA Privacy Coverage.

For more information and resources about HIPPA, visit the U.S. Department of Health & Human Services website at https://www.hhs.gov/.

For more information on the NASW-Endorsed Liability Insurance Program which includes HIPAA Privacy Coverage, visit NASW Assurance Services at https://www.naswassurance.org/getcoverage.

To view the NASW, ASWB, + CSWA Standards for Technology in Social Work Practice,
visit www.naswpress.org/publications/.