Did the final modifications to the HIPAA Privacy Rule alter the compliance date(s) for covered entities?

Answer:

No. The compliance dates for the Privacy Rule, as modified, remained April 14, 2003, for most health plans, covered health care providers, and health care clearinghouses, and April 14, 2004, for small health plans. Under HIPAA, compliance with a modification to an existing standard or implementation specification is required by a date set by the Secretary, but not earlier than 180 days from the adoption of the modification. By publishing the modifications to the Privacy Rule in August 2002, the original compliance date of April 2003 was maintained for the entire Rule, as modified.

For more detailed information about health privacy, you may want to visit our Medical Privacy: National Standards to Protect the Privacy of Personal Health Information site.

Learn More:

• When will covered entities have to meet these HIPAA privacy standards?

• What were the major modifications to the HIPAA Privacy Rule that the Department of Health and Human Services (HHS) adopted in August 2002?

Date Created: 12/19/2002
Last Updated: 02/14/2008