E9-31216 I B 2

2. Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule Accounting of Disclosures Regulation

Section 13405(c) of the HITECH Act requires the Secretary to promulgate regulations on what information shall be collected about disclosures for treatment, payment, or health care operations made ‘‘through an electronic health record’’ by a HIPAA covered entity.

These regulations, which will be issued by the Secretary through the HHS Office for Civil Rights, must be issued not later than 6 months after the date on which the Secretary adopts standards on accounting for disclosures described in the section 3002(b)(2)(B)(iv) of the PHSA.

The certification criterion and standard associated with this requirement and included in this interim final rule are discussed in more detail below in section III.C.4.c. E9-31216 II C 4 c