In the realm of HIPAA compliance, there have been notable developments that will impact how healthcare organizations approach their compliance efforts in 2023. For instance, there is a growing emphasis on giving patients greater access to their medical records, with enforcement actions being taken against organizations that fail to provide such access or adequately protect patient information. Additionally, proposed changes to regulations governing patient access and care coordination may require healthcare organizations to adjust their compliance practices.
In recent years, there has also been a greater focus on ensuring that business associates of covered entities are held to the same compliance standards. While some relaxation of requirements for establishing such relationships has been permitted during the COVID-19 emergency, organizations should be aware that these relaxations are temporary and will end once the emergency has passed.
Furthermore, healthcare organizations will need to ensure that their communication and information systems comply with HIPAA regulations. Given the fast-paced and ever-evolving nature of the healthcare industry, it is likely that these compliance requirements will continue to evolve and change in 2023 and beyond.
This HIPAA Compliance in 2023 session will cover recent developments and expected changes in HIPAA rules and regulations, with a focus on patient access to information, information security, and communication technologies. The US Department of Health and Human Services has emphasized patient access as a priority, with new guidance issued and enforcement actions were taken against non-compliant entities. Proposed changes to the Privacy Rule will codify access guidance and provide new avenues for patients to request copies of their records. Information security remains a key focus for enforcement, while HIPAA allowances for communication during the COVID-19 emergency will end as the emergency ends.
The HIPAA Compliance in 2023 session will also discuss Business Associate responsibilities and likely rule changes in Accounting of Disclosures, Notice of Privacy Practices, cell phone communications, and new technologies, as well as proposed changes in the Privacy Rule pertaining to Care Coordination.
