View Rule

View EO 12866 Meetings Printer-Friendly Version     Download RIN Data in XML

HHS/OS RIN: 0991-AC05 Publication ID: Fall 2017 
Title: Privacy Act Regulations 

45 CFR part 5b details how the Department of Health and Human Services (HHS) implements its Privacy Act program to comply with Federal law as specified in the Privacy Act of 1974. The rule governs how HHS collects, maintains, uses, and disseminates personally identifiable information about individuals that is maintained in Systems of Records. This rule is divided into the following sections: 1. Purpose, Definitions, and Policy; 2. Maintenance of Records; 3. Classified Information; 4. Requests for notification and access; 5. Special procedures for notification of or access to medical records; 6. Requests for correction or amendment; 7. Requests for accountings of disclosures; 8. Consent requirement and exceptions; 9. Appeals; 10. Records Preservation; 11. Fees; 12. Notice of court-ordered and emergency disclosures; 13. Security; 14. Contractors; 15. Social security numbers; 16. Relationship to the Health Insurance Portability and Accountability Act (HIPAA); 17. Employee standards of conduct; 18. Sanctions and penalties; 19. Other rights and services; 20. Exempt systems of records.

Agency: Department of Health and Human Services(HHS)  Priority: Other Significant 
RIN Status: Previously published in the Unified Agenda Agenda Stage of Rulemaking: Prerule Stage 
Major: No  Unfunded Mandates: No 
EO 13771 Designation: Fully or Partially Exempt 
CFR Citation: None     (To search for a specific CFR, visit the Code of Federal Regulations.)
Legal Authority: Not Yet Determined   
Legal Deadline:  None
Action Date FR Cite
ANPRM  11/00/2017 
Additional Information: This is an administrative, no-cost rule. This rule will update a rule that was last published in 1975 and, therefore, is significantly outdated. Updated regulations are needed to include not only significant changes to the HHS organization but also changes in the law that have been implemented since the HHS regulations were last updated in 1975. The updated rule will aid the general public in its ability to understand and use the Privacy Act of 1974. Since the Privacy Act provides U.S. citizens the right of access to records the Federal government keeps on them, it is essential that the HHS Privacy Act Regulations are up-to-date and accurate.
Regulatory Flexibility Analysis Required: No  Government Levels Affected: None 
Federalism: No 
Included in the Regulatory Plan: No 
RIN Data Printed in the FR: No 
Agency Contact:
Catherine Teti
Executive Officer and Deputy Agency Chief FOIA Officer
Department of Health and Human Services
Office of the Secretary
Washington, DC 20201
Phone:202 260-7100