Feds Issue HIPAA Technical Corrections

Let’s face it, federal rules and regulations are too complicated for even the Feds to figure them out, so it should come as little surprise that the HIPAA regulations that went into effect in March 2013 have some errors. In a final regulation to clear up “technical errors”, the feds announced June 7 that the following changes are being made:

§ 160.508 [Amended]

2.Amend § 160.508(c)(5) by correcting “§ 160.410(b)(3)(ii)(B)” to read “§ 160.410(b)(2)(ii)(B) or (c)(2)(ii)” and by correcting “42 U.S.C. 1320d-5(b)(3)(B)” to read “42 U.S.C. 1320d-5(b)(2)(B)”.
§ 160.548 [Amended]

3.Amend § 160.548(e) by correcting “§ 160.410(b)(1)” to read “§ 160.410(a)(1) or (2)”.
PART 164—SECURITY AND PRIVACY Back to Top

4.The authority citation for part 164 continues to read as follows:
Authority:

42 U.S.C. 1302(a); 42 U.S.C. 1320d-1320d-9; sec. 264, Pub. L. 104-191, 110 Stat. 2033-2034 (42 U.S.C. 1320d-2 (note)); and secs. 13400-13424, Pub. L. 111-5, 123 Stat. 258-279.
§ 164.103 [Amended]

5.Amend § 164.103 as follows:

a. In the definition of health care component, by correcting “§ 164.105(a)(2)(iii)(C)” to read “§ 164.105(a)(2)(iii)(D)”.

b. In the definition of hybrid entity, by correcting “§ 164.105(a)(2)(iii)(C)” to read “§ 164.105(a)(2)(iii)(D)”.
§ 164.314 [Amended]

6.Amend § 164.314(a)(1) by correcting “§ 164.308(b)(4)” to read “§ 164.308(b)(3)”.
§ 164.512 [Amended]

7.Amend § 164.512(k)(4)(i) by correcting “12698” to read “12968”.
§ 164.514 [Amended]

8.Amend § 164.514(f)(2)(iv) by correcting “paragraph (f)(1)(ii)(B)” to read “paragraph (f)(2)(ii)”.
§ 164.524 [Amended]

9.Amend § 164.524(c)(4)(iv) by correcting “paragraph (c)(2)(ii)” to read “paragraph (c)(2)(iii)”.
§ 164.532 [Amended]

10.Amend the introductory text of § 164.532(f) by correcting “[January 25, 2013” to read “January 25, 2013”.

I am reprinting this list because with all the major scandals rocking DC, it is likely that you might miss the news of minor screw-ups. Please note that such errors are OK for the government, but not for covered entities and business associates. You are required to know what they meant, not what they said.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.