View Rule

View EO 12866 Meetings Printer-Friendly Version     Download RIN Data in XML

HHS/OCR RIN: 0945-AA00 Publication ID: Fall 2018 
Title: HIPAA Privacy: Request for Information on Changes to Support, and Remove Barriers to, Coordinated Care 

This Request for Information (RFI) would solicit the public’s views on whether there are provisions of the HIPAA Rules which present barriers that limit or discourage coordinated care and case management among hospitals, physicians (and other providers), payors, and patients, or otherwise impose regulatory burdens that may impede the transformation to value-based health care without providing commensurate privacy or security protections for patients' protected health information and while maintaining patients' ability to control the use or disclosure of their PHI and to access PHI. In addition to a general request for information, the RFI would specifically seek comment on a number of particular issues, including: (1) Methods of accounting of all disclosures of a patient's protected health information; (2) patients' acknowledgment of receipt of a providers' notice of privacy practices; (3) creation of a safeharbor for good faith disclosures of PHI for purposes of care coordination or case management; (4) disclosures of protected health information without a patient's authorization for treatment, payment, and health care operations; (5) the minimum necessary standard/requirement. This RFI would subsume the previous 0945-AA08 entry in the Regulatory Agenda.

Agency: Department of Health and Human Services(HHS)  Priority: Other Significant 
RIN Status: Previously published in the Unified Agenda Agenda Stage of Rulemaking: Prerule Stage 
Major: Undetermined  Unfunded Mandates: Undetermined 
EO 13771 Designation: Other 
CFR Citation: 45 CFR 164   
Legal Authority: Pub. L. 115-5, sec. 13405(c)   
Legal Deadline:
Action Source Description Date
Final  Statutory  The statutory deadline to issue a rule on accounting of disclosures was 06/01/2010  06/01/2010 

Overall Description of Deadline: Required by the HITECH Act. Statutory deadline contingent on further regulatory action.

Statement of Need:

The HHS Deputy Secretary recently launched an initiative called the Regulatory Sprint to Coordinated Care. The goal of the Regulatory Sprint is to remove regulatory barriers that impede coordinated, value-based health care. This RFI is being produced to support the Regulatory Sprint.

Summary of the Legal Basis:

The HIPAA statute and its amendments.


 None were considered as this RFI is intended to solicit various policies for improving HIPAA.

Anticipated Costs and Benefits:

No anticipated costs as this is not regulatory.  Benefits include receiving public feedback on potential policies to pursue in rulemaking.


None known.

Action Date FR Cite
NPRM  05/31/2011  76 FR 31426   
NPRM Comment Period End  08/01/2011    
NPRM Withdrawal  11/00/2018 
RFI  11/00/2018 
Regulatory Flexibility Analysis Required: Undetermined  Government Levels Affected: Undetermined 
Federalism: No 
Included in the Regulatory Plan: Yes 
RIN Information URL:  
RIN Data Printed in the FR: No 
Agency Contact:
Andra Wicks
Health Information Privacy Specialist
Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue SW,
Washington, DC 20201
Phone:800 368-1019
TDD Phone:800 537-7697