§1320d–2. Standards for information transactions and data elements — Inbound Citations
42 U.S.C. § 1320d–2
Cited by 26 provisions in release 119-102.
Citations to 42 U.S.C. § 1320d–2 as a whole
-
(ii) the security and privacy regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note); and
-
(1) the privacy regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note; Public Law 104–191); and
-
(B) affect section 444 of the General Education Provisions Act [20 U.S.C. 1232g] (commonly known as the “Family Educational Rights and Privacy Act of 1974”) or the regulations issued under section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note);
-
(3) to affect section 1232g of this title (commonly known as the “Family Educational Rights and Privacy Act of 1974”) or the regulations issued under section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note).
-
(B) any such disclosure shall be made in compliance with regulations issued pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note) and sections 552 and 552a of title 5.
-
(ii) the disclosure is permitted under regulations promulgated pursuant to section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note).
-
(3) Penalties shall not be imposed both under this subsection and under the regulations issued pursuant to section 264(c)(1) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note) for a single act or omission.
-
(iv) shall ensure that consumer data is protected in accordance with the requirements of section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note); and
-
(7) The President, acting through the Secretary of Health and Human Services, shall carry out each program under paragraph (1) in accordance with regulations relating to privacy promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note; Public Law 104–191).
-
(D) The standards, implementation specifications, and certification criteria recommended under paragraph (2)(B) shall be consistent with the standards for information transactions and data elements adopted pursuant to section 1320d–2 of this title.
-
(A) The Office of the Inspector General, if such Office determines that a consultation regarding the health privacy and security rules promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note) will resolve an information blocking claim, may refer such instances of information blocking to the Office for Civil Rights of the Department of Health and Human Services for resolution.
-
(7) sanctions and penalties that arise from noncompliance with the following requirements (as promulgated under the authority of section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note)—1(A) section 164.510 of title 45, Code of Federal Regulations, relating to—(i) requirements to obtain a patient’s agreement to speak with family members or friends; and(ii) the requirement to honor a request to opt out of the facility directory;(B) section 164.520 of such title, relating to the requirement to distribute a notice; or(C) section 164.522 of such title, relating to—(i) the patient’s right to request privacy restrictions; and(ii) the patient’s right to request confidential communications;
-
(a) The Secretary shall carry out section 1320d–2 of this title not later than 18 months after August 21, 1996, except that standards relating to claims attachments shall be adopted not later than 30 months after August 21, 1996.
-
(1) Except as provided in paragraph (2), the Secretary shall review the standards adopted under section 1320d–2 of this title, and shall adopt modifications to the standards (including additions to the standards), as determined appropriate, but not more frequently than once every 12 months. Any addition or modification to a standard shall be completed in a manner which minimizes the disruption and cost of compliance.
-
(A) Not later than 24 months after the date on which an initial standard or implementation specification is adopted or established under sections 1320d–1 and 1320d–2 of this title, each person to whom the standard or implementation specification applies shall comply with the standard or specification.
-
(3) The term “HIPAA privacy regulation” means the regulations promulgated by the Secretary under this part and section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note).
-
(B) Information may only be disclosed by a MEDIC under subparagraph (A) if the disclosure of such information is permitted under the Federal regulations (concerning the privacy of individually identifiable health information) promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note).
-
(J) Prior to the implementation of the rules and procedures under this paragraph, the Secretary shall clarify privacy requirements, including requirements under the regulations promulgated pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note), related to the sharing of data under subparagraphs (H) and (I) by PDP sponsors. Such clarification shall provide that the sharing of such data shall be considered to be protected health information in accordance with the requirements of the regulations promulgated pursuant to such section 264(c).
-
(A) For purposes of the program under this section, the operations of an endorsed program are covered functions and a prescription drug card sponsor is a covered entity for purposes of applying part C of subchapter XI and all regulatory provisions promulgated thereunder, including regulations (relating to privacy) adopted pursuant to the authority of the Secretary under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note).1
-
(c) The Secretary shall clarify privacy requirements, including requirements under the regulations promulgated pursuant to section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note), related to the sharing of data under subsection (b) in the same manner as the Secretary is required under subparagraph (J) of section 1395w–104(c)(5) of this title to clarify privacy requirements related to the sharing of data described in such subparagraph.
-
(c) With respect to the regulations promulgated by the Secretary of Health and Human Services under part C of title XI of the Social Security Act (42 U.S.C. 1320d et seq.) and section 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d–2 note), this chapter does not prohibit a covered entity under such regulations from any use or disclosure of health information that is authorized for the covered entity under such regulations. The previous sentence does not affect the authority of such Secretary to modify such regulations.
-
(3) For purposes of section 264(c) of the Health Insurance Portability and Accountability Act of 1996 (including regulations issued under that section) (42 U.S.C. 1320d–2 note), the Ombudsman and a representative of the Office shall be considered a “health oversight agency,” so that release of residents’ individually identifiable health information to the Ombudsman or representative is not precluded in cases in which the requirements of clause (i) or (ii) of paragraph (1)(B), or the requirements of paragraph (1)(D), are otherwise met.
Citations to §1320d–2(a)(1)
-
(7) The term “standard”, when used with reference to a data element of health information or a transaction referred to in section 1320d–2(a)(1) of this title, means any such data element or transaction that meets each of the standards and implementation specifications adopted or established by the Secretary with respect to the data element or transaction under sections 1320d–1 through 1320d–3 of this title.
-
(3) A health care provider who transmits any health information in electronic form in connection with a transaction referred to in section 1320d–2(a)(1) of this title.
-
(1) If a person desires to conduct a transaction referred to in section 1320d–2(a)(1) of this title with a health plan as a standard transaction—(A) the health plan may not refuse to conduct such transaction as a standard transaction;(B) the insurance plan may not delay such transaction, or otherwise adversely affect, or attempt to adversely affect, the person or the transaction on the ground that the transaction is a standard transaction; and(C) the information transmitted and received in connection with the transaction shall be in the form of standard data elements of health information.
Citations to §1320d–2(b)
-
(4) Each medicaid managed care organization shall require each physician providing services to enrollees eligible for medical assistance under the State plan under this subchapter to have a unique identifier in accordance with the system established under section 1320d–2(b) of this title.