Introduction

Congress enacted Health Insurance Portability and Accountability Act (HIPAA) (P.L 104-191) in 1996 to limit the ability of an employer to deny health insurance coverage to employees with preexisting medical conditions. The law also directed the Department of Health and Human Services (HHS) to develop privacy rules, including, but not limited to, the use of electronic medical records (EMR). This law has increased patient privacy, but in doing so has added to the financial, including personnel cost of health care. Nurses stand at the forefront in resolving the dilemma of patient privacy versus health care expediency. The purpose of this article is to assist nurses and other health care professionals to better understand their responsibilities regarding HIPAA regulations. First responses to HIPAA regulations by covered entities to date, along with responses which are still needed, will be described. It will be noted that HIPAA is a work in progress and not a specific act. Next future initiatives having HIPAA implications will be presented. In conclusion, the need for all covered entities and their personnel to look broadly at HIPAA, seeing HIPAA as initiating a new way of work in health care will be emphasized.

Keywords: HIPAA regulations, covered entities, patient safety, Health Alert Network, personal health records, consumer-driven health plans.

About the Author