<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<REGINFO_RIN_DATA xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" RUN_DATE="2026-05-27-04:00" xsi:noNamespaceSchemaLocation="https://www.reginfo.gov/public/xml/REGINFO_XML_Ver10262011.xsd">
    <RIN_INFO>
        <RIN>0991-AB57</RIN>
        <PUBLICATION>
            <PUBLICATION_ID>200910</PUBLICATION_ID>
            <PUBLICATION_TITLE>The Regulatory Plan and the Unified Agenda of Federal Regulatory and Deregulatory Actions</PUBLICATION_TITLE>
        </PUBLICATION>
        <AGENCY>
            <CODE>0991</CODE>
            <NAME>Office of the Secretary</NAME>
            <ACRONYM>OS</ACRONYM>
        </AGENCY>
        <PARENT_AGENCY>
            <CODE>0900</CODE>
            <NAME>Department of Health and Human Services</NAME>
            <ACRONYM>HHS</ACRONYM>
        </PARENT_AGENCY>
        <RULE_TITLE>Standards for Privacy of Individually Identifiable Health Information; Modifications to the HIPAA Privacy Rule Under the Health Information Technology for Economic and Clinical Health Act</RULE_TITLE>
        <ABSTRACT><![CDATA[The Department of Health and Human Services Office for Civil Rights will issue rules to modify the HIPAA Privacy Rule as necessary to implement the accounting provisions of Section 13405(c) of the Health Information Technology for Economic and Clinical Health Act (Title XIII of the American Recovery and Reinvestment Act of 2009).]]></ABSTRACT>
        <PRIORITY_CATEGORY>Other Significant</PRIORITY_CATEGORY>
        <RIN_STATUS>Previously Published in The Unified Agenda</RIN_STATUS>
        <RULE_STAGE>Proposed Rule Stage</RULE_STAGE>
        <MAJOR>Undetermined</MAJOR>
        <UNFUNDED_MANDATE_LIST>
            <UNFUNDED_MANDATE>Undetermined</UNFUNDED_MANDATE>
        </UNFUNDED_MANDATE_LIST>
        <CFR_LIST>
            <CFR>45 CFR 160</CFR>
            <CFR>45 CFR 164</CFR>
        </CFR_LIST>
        <LEGAL_AUTHORITY_LIST>
            <LEGAL_AUTHORITY>PL 111-5, secs 13400 to 13410</LEGAL_AUTHORITY>
        </LEGAL_AUTHORITY_LIST>
        <LEGAL_DLINE_LIST>
            <LEGAL_DLINE_INFO>
                <DLINE_TYPE>Statutory</DLINE_TYPE>
                <DLINE_ACTION_STAGE>NPRM</DLINE_ACTION_STAGE>
                <DLINE_DATE>02/17/2010</DLINE_DATE>
                <DLINE_DESC> </DLINE_DESC>
            </LEGAL_DLINE_INFO>
        </LEGAL_DLINE_LIST>
        <RPLAN_ENTRY>Yes</RPLAN_ENTRY>
        <RPLAN_INFO>
            <STMT_OF_NEED><![CDATA[The Office for Civil Rights will issue rules to modify the HIPAA Privacy rule to implement the privacy provisions in sections 13400-13410 of the Health Information technology for economic and clinical health Act (Title XIII of division a of the American Recovery and Reinvestment Act of 2009, Pub. L. 111-5).  these regulations will improve the privacy and security protection of health information.]]></STMT_OF_NEED>
            <LEGAL_BASIS><![CDATA[Subtitle D of the Health Information Technology for Economic and Clinical Health Act (Title XIII of the American Recovery and Reinvestment Act of 2009) requires the Office for Civil Rights to modify certain provisions of the HIPAA Privacy and Security Rules to implement sections 13400-13410 of the Act.]]></LEGAL_BASIS>
            <ALTERNATIVES><![CDATA[The Office for Civil Rights is statutorily mandated to make modifications to the HIPAA Privacy and Security Rules to implement the privacy provisions at sections 13400-13410 of the Health Information Technology for Economic and Clinical Health Act (Title XIII of the American Recovery and Reinvestment Act of 2009).]]></ALTERNATIVES>
            <COSTS_AND_BENEFITS><![CDATA[These modifications to the HIPAA Privacy Rule are intended to benefit health care consumers by strengthening the privacy and security protections that govern how their health information is used and disclosed by HIPAA covered entities and their business associates.  The Agency believes that there may be costs associated with the regulations that will affect HIPAA covered entities and their business associates.  These may include costs to redraft existing business associate contracts as well as for the training on new policies and procedures as a result of these regulations.]]></COSTS_AND_BENEFITS>
        </RPLAN_INFO>
        <TIMETABLE_LIST>
            <TIMETABLE>
                <TTBL_ACTION>NPRM</TTBL_ACTION>
                <TTBL_DATE>12/00/2009</TTBL_DATE>
            </TIMETABLE>
        </TIMETABLE_LIST>
        <RFA_REQUIRED>Undetermined</RFA_REQUIRED>
        <GOVT_LEVEL_LIST>
            <GOVT_LEVEL>State</GOVT_LEVEL>
        </GOVT_LEVEL_LIST>
        <FEDERALISM>Yes</FEDERALISM>
        <PRINT_PAPER>No</PRINT_PAPER>
        <INTERNATIONAL_INTEREST>No</INTERNATIONAL_INTEREST>
        <AGENCY_CONTACT_LIST>
            <CONTACT>
                <FIRST_NAME>Andra</FIRST_NAME>
                <LAST_NAME>Wicks</LAST_NAME>
                <TITLE>Health Information Privacy Specialist</TITLE>
                <AGENCY>
                    <CODE>0945</CODE>
                    <NAME>Office for Civil Rights</NAME>
                    <ACRONYM>OCR</ACRONYM>
                </AGENCY>
                <PHONE>202 205-2292</PHONE>
                <FAX>202 205-4786</FAX>
                <EMAIL>andra.wicks@hhs.gov</EMAIL>
                <MAILING_ADDRESS>
                    <STREET_ADDRESS>200 Independence Avenue SW.,</STREET_ADDRESS>
                    <CITY>Washington</CITY>
                    <STATE>DC</STATE>
                    <ZIP>20201</ZIP>
                </MAILING_ADDRESS>
            </CONTACT>
        </AGENCY_CONTACT_LIST>
    </RIN_INFO>
</REGINFO_RIN_DATA>
