Fed Regist. 2013 Jan 25;78(17):5565-702.
The Department of Health and Human Services (HHS or the Department'') is issuing this final rule to: Modify the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Enforcement Rules to implement statutory amendments under the Health Information Technology for Economic and Clinical Health Act (the HITECH Act'' or ``the Act'') to strengthen the privacy and security protection for individuals' health information; modify the rule for Breach Notification for Unsecured Protected Health Information (Breach Notification Rule) under the HITECH Act to address public comment received on the interim final rule; modify the HIPAA Privacy Rule to strengthen the privacy protections for genetic information by implementing section 105 of Title I of the Genetic Information Nondiscrimination Act of 2008 (GINA); and make certain other modifications to the HIPAA Privacy, Security, Breach Notification, and Enforcement Rules (the HIPAA Rules) to improve their workability and effectiveness and to increase flexibility for and decrease burden on the regulated entities.
美国卫生与公众服务部（HHS 或“该部门”）发布本最终规则旨在：修改《健康保险流通与责任法案》（HIPAA）的隐私、安全及执行规则，以实施《经济和临床健康信息技术法案》（“《健康信息技术法案》”或“该法案”）规定的法定修正案，加强对个人健康信息的隐私和安全保护；修改《健康信息技术法案》下关于未加密受保护健康信息的违规通知规则（《违规通知规则》），以回应就暂行最终规则收到的公众意见；通过实施 2008 年《基因信息非歧视法案》（GINA）第一章第 105 节，修改 HIPAA 隐私规则，以加强对基因信息的隐私保护；并对 HIPAA 隐私、安全、违规通知及执行规则（HIPAA 规则）进行某些其他修改，以提高其可操作性和有效性，并增加受监管实体的灵活性，减轻其负担。
