The new privacy rules law went into effect on April 14, 2003. It is called "Health Insurance Portability and Accountability Act" or HIPAA..

Since the law has gone into effect, I have had to sign off for it at my local pharmacy, doctors office and even received information in the mail from my health care provider.

So the problem for me is getting through the legal mumble jumble and I can't even decide if it is a good thing or a bad thing.

Does anyone have a better understanding of this law that maybe they can pass on in laymans terms?

:confused:
:confused:
:confused:

Bunny...

The HIPAA privacy regs were established to protect the privacy of your personal healthcare information, or "PHI". It does this by establishing requirements for governing access to your PHI. Access should be limited to only personnel immedately involved in your medical care, and only information that is needed on a need-to-know basis.

As per the regulations, covered entities (i.e. hospitals) must keep an audit log of anyone access to your PHI, and you have the right to request a copy of that audit log.

There are also other purposes that your medical records might be accessed, that are not directly tied to your medical care (i.e. fundraising, research, directory services). Any access that's desired of your PHI must be approved by the patient, and you have the right to deny it.

Of course, this is just a very very high level look at the HIPAA Privacy regs, but it should give you a little better understanding.