Among the most significant changes of the Final HIPAA amendments are the provisions that extend the Privacy and Security Rules\u2019 stringent compliance obligations to business associates (BA) and expand the definition of BAs to include subcontractors of BAs. Why the changes? The HITECH Act of 2009 specifically extends direct liability to BAs and expands the list of obligations for BAs. The Department of Health & Human Services extends BA obligations even further to ensure the privacy and security of all PHI throughout the HIPAA ecosystem.<\/p>\n
Click here<\/a> to read a summary of the key provisions under the 2013 amendments, as well as factors that may be worthwhile for covered entities and business associates to consider in light of these amendments.<\/p>\n","protected":false},"excerpt":{"rendered":" Among the most significant changes of the Final HIPAA amendments are the provisions that extend the Privacy and Security Rules\u2019 stringent compliance obligations to business associates (BA) and expand the definition of BAs to include subcontractors of BAs. Why the changes? The HITECH Act of 2009 specifically extends direct liability to BAs and expands the … <\/p>\n Continue reading “Final HIPAA Amendments Expand HIPAA Net: Business Associates Now Required to Enter into Business Associate Agreements with Subcontractors”<\/span><\/a><\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[276,217,75,273,275,40,277,274,220,219],"ppma_author":[906],"class_list":["post-159","post","type-post","status-publish","format-standard","hentry","category-health-law","tag-business-associate","tag-data-breach","tag-health-care","tag-health-information-technology","tag-health-law-2","tag-hipaa","tag-hit","tag-hitech","tag-privacy","tag-security"],"authors":[{"term_id":906,"user_id":6,"is_guest":0,"slug":"duanemorris3","display_name":"Duane Morris","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/843ff6e7a8fe5fc92109b47a45f34b6cf0ea499e6e788db23456c838b0ae6747?s=96&d=blank&r=g","author_category":"1","last_name":"Sullivan","first_name":"Margaret","job_title":"","user_url":"http:\/\/www.duanemorris.com","description":"Visit the Duane Morris website.<\/a>"}],"_links":{"self":[{"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/posts\/159","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/comments?post=159"}],"version-history":[{"count":0,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/posts\/159\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/media?parent=159"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/categories?post=159"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/tags?post=159"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.duanemorris.com\/healthlaw\/wp-json\/wp\/v2\/ppma_author?post=159"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}