The HIPAA Final Rule enforcement date is September 23, 2013. Is your Notice of Privacy Practices ready?

The HIPAA Omnibus Final Rule was announced on January 17, 2013 and became effective on March 23, 2013. The enforcement date is right around the corner on September 23, 2013. Have you made the necessary modifications to your NPP? If so, do you know what to do next?

The final rule modifies and expands the obligations of covered entities. If you haven’t made the necessary modifications to your NPP, now is the time to do so. The AMA provides a helpful summary of the rule that focuses on three important topics for physicians including the NPP.
You can find it here:
http://www.ama-assn.org/resources/doc/washington/hipaa-omnibus-final-rule-summary.pdf

If your NPP is modified and Omnibus ready, there are a few steps you must take in your practice to ensure compliance.

1)Post the new/modified NPP on your web site.
2)Display the new/modified NPP in a prominent spot in your office.(This may be a summary of the full NPP)
3)Make copies of the NPP readily available to existing patients who request a copy.
4)Provide the new version of your NPP to all new patients at their first visit.

HIPAA, enforced by the Health and Human Services Office of Civil Rights, protects patients’ rights. It is important to take measures to ensure compliance within your practice. Noncompliance could result in civil penalties ranging from $50,000 to $1.5 million.