0945-AA09 201710 The Regulatory Plan and the Unified Agenda of Federal Regulatory and Deregulatory Actions 0945 Office for Civil Rights OCR 0900 Department of Health and Human Services HHS HIPAA Privacy Rule: Presumption of Good Faith of HealthCare Providers

The proposed rule would modify the HIPAA Privacy Rule to clarify that healthcare providers are presumed to be acting in the individual's best interests when they share information with an incapacitated patient's family members unless there is evidence that a provider was acted in bad faith.

 

 

]]> Other Significant First Time Published in The Unified Agenda Proposed Rule Stage No No Deregulatory 45 CFR 164.510 Health Insurance Portability and Accountability (HIPAA) Act of 1996, Pub. L. 104-191 Yes

HIPAA allows medical professionals to share protected health information with an individual's loved ones in emergency or dangerous situations but misunderstandings to the contrary persist and create obstacles to family support that is crucial to the proper care, treatment, and recovery of people experiencing a crisis situation. Therefore, the Department, through the Office for Civil Rights (OCR) intends to propose regulatory changes to the HIPAA Privacy Rule to clarify that healthcare providers are presumed to be acting in the individual's best interests when they share information with an incapacitated patient's family members, unless there is evidence that a provider acted in bad faith.  OCR by delegation from the Secretary, has broad authority under HIPAA to make modifications to the Privacy Rule, as provided by section 264 of HIPAA (codified at 42 U.S.C. and 1320d-2(note)).

]]>

OCR has broad authority under the HIPAA statute to make modifications to the Privacy Rule, within the statutory constraints of the HITECH Act and other applicable law (e.g., the Administrative Procedures Act).

]]>

The alternative is to not issue a proposed rule.

]]>

The proposed rule will not create any new requirements or costs for regulated entities or the public. It will provide assurances to health care providers about their ability to make disclosures that are in the best interests of patients.

]]>

OCR has not identified any risks associated with this proposal. OCR currently defers to a healthcare provider's professional judgment in these circumstances and has never taken enforcement action against a healthcare provider who shared information in good faith, thus, the proposed regulatory change will not decrease the privacy protections for individuals' protected health information, or significantly alter HIPAA enforcement policy.

]]> NPRM 05/00/2018 No None No No No Andra Wicks Health Information Privacy Specialist 0945 Office for Civil Rights OCR 800 368-1019 800 537-7697 ocrmail@hhs.gov 200 Independence Avenue SW, Washington DC 20201