The Department of Health and Human Services has announced proposed changes to the disclosure requirements as part of the Health Insurance Portability and Accountability Act (HIPAA) Privacy rule that would require providers to send a report on patient electronic medical information, when it was accessed and by whom, upon a request from the patient.
Current regulations require providers to track access to the electronic medical data, but they are not required to share the information with anyone. This new policy seeks to further comply with the HITECH Act, which was part of the American Recovery and Reinvestment Act of 2009.
This is a proposed rule change at this time, HHS will likely accept comment through August 1, 2011.
Read the Department of Health and Human Services release HERE