The comment period for proposed changes to the HIPAA privacy, security and enforcement rules ended on Monday and, according to a GovInfoSecurity report, the Department of HHS received thousands of pages of comments from hundreds of organizations. Those who commented highlighted concerns about the cost associated with allowing patients to restrict who sees their medical information and the provision requiring covered entities to modify their business associate agreements to reflect the latest modifications, the reports states. Some requested more guidance on the risk assessment requirement and many asked for the 180-day compliance deadline to be extended.
Full Story