Notice of Proposed Rule Making for
Standards for Privacy of Individually Identifiable Health Information
Published November 3, 1999; Comment period ended February 17, 2000
Complete NPRM as published on November 3, 1999 in the Federal Register:
View in
format
in 3 sections:
Section 1
Section 2
Section 3
or in one big document:
Privacy NPRM
For download in
in
1 compressed file
Comment period extension as published on December 15, 1999 in the Federal Register:
View in
format:
Comment Period Extension
Technical Corrections as published on January 5, 2000 in the Federal Register:
View in
format:
Technical Corrections
To read files in Adobe's Portable Document Format (PDF), you will need
Adobe Acrobat Reader 3.0 or above.
If you do not already have Acrobat, click here:
Also available in text format (for faster viewing but without formatting):
View NPRM in
format
in 3 sections:
Section 1
Section 2
Section 3
or in one big document:
Privacy NPRM
View comment period extension in
format:
Extension
View technical corrections in
format:
Technical Corrections
Read NPRM, by Section
Summary and Introduction
Table of Contents
Background: Need for Privacy Standards
Statutory Background
Consultations
Summary and Purpose of the Proposed Rule
Applicability
Definitions
Introduction to General Rules
Use and Disclosure for Treatment, Payment, and Health Care Operations
Minimum Necessary Use and Disclosure
Right to Retrict Uses and Disclosures
Creation of De-Identified Information
Application to Business Partners
Application to Information About Deceased Persons
Adherence to the Notice of Information Practices
Application to Component Entities
Uses and Disclosures With Individual Authorization
Introduction to Uses and Disclosures Without Individual Authorization
Uses and Disclosures for Public Health Activities
Use and Disclosure for Health Oversight Activities
Use and Disclosure for Judicial and Administrative Proceedings
Disclosure to Coroners and Medical Examiners
Disclosure for Law Enforcement
Uses and Disclosures for Governmental Health Data Systems
Disclosure of Directory Information
Disclosure for Banking and Payment Processes
Uses and Disclosures for Research
Uses and Disclosures in Emergency Circumstances
Disclosure to Next-of-Kin
Additional Uses and Disclosures Required by Other Law
Application to Military Services
Application to the Department of Veterans Affairs
Application to the Department of State
Application to the Intelligence Community
Introduction to Rights of Individuals
Rights and Procedures for a Written Notice of Information Practices
Rights and Procedures for Access for Inspection or Copying
Rights and Procedures for Accounting of Disclosures
Rights and Procedures for Amendment or Correction
Introduction to Administrative Requirements
Designation of a Privacy Official
Training
Safeguards
Sanctions
Duty to Mitigate
Development and Documentation of Policies and Procedures
Relationship to State Laws
Relationship to Other Federal Laws
Compliance
Enforcement
Small Business Assistance
Preliminary Regulatory Impact Analysis
Initial Regulatory Flexibility Analysis
Unfunded Mandates
Environmental Impact
Collection of Information Requirements
Executive Order 12612: Federalism
Executive Order 13086: Consultation and Coordination With Indian Tribal Governments
List of Subjects in 45 CFR Parts 160 and 164
Appendix to the Preamble: Sample Content of Provider Notice
Regulation Text
Appendix: Model Authorization Form
Go to View the Comments Received
Go to the Administrative Simplification Home Page
Send questions about the web site to the
Administrative Simplification Web Master
.
Updated 2/18/2000.