Department of Health and Human Services Office of Civil Rights…

…published an omnibus rule which implemented the Health Information Technology for Economic and Clinical Health (HITECH) Act in 2013. It’s purpose was to expand patients’ rights and implement new safeguards to protect medical information handled by covered entities and business associates.

The implications were that any subcontractor who handles PHI much have a BAA in place with the covered entity and that all breaches must be reported to all of the affected covered entities.