NOTE: All dates, unless otherwise listed, reflect the date on which the item was posted to the DHHS HIPAA web site.

  General

Transactions and Code Sets

• Interim Final Rule on Electronic Submission of Medicare Claims
• CMS Guidance on TCS Compliance and Other Compliance Tools
• Complete text of the corrected Revised Final Rule - Standards for Electronic Transactions (02/20/2003)
• HR 3323 - Administrative Simplification Compliance Act (12/01/2001)
• Complete text of Standards for Electronic Transactions (original rule, 08/17/2000) (NOTE: Part 160 of this regulation has been superceded by Part 160 of the Privacy Regulation)
• Implementation Guides and Associated Addenda
• Transaction Standards FAQs
• Code Set FAQs

Identifiers

• National Provider Identifier:
  • Final Rule (1/23/2004)
  • CMS Overview
  • CMS Education Resources
  • NPI Question Resource Sheet by CMS
  • NPI Compliance Guidance and Contigency Planning Resources by CMS
  • FAQs
• Standard Unique Employer Identifier - Final (5/31/2002), Overview of Employer Identifier Rule and FAQs
• National Health Plan Identifier - Under development; not yet available
• National Individual Identifier - On hold indefinitely

Privacy

• OCR Publishes Combined Privacy, Security, Transaction, Identifier and Enforcement Regulations (2/16/2006)
• OCR Privacy Rule Summary (RTF | PDF)
• OCR Fact Sheet: Protecting the Privacy of Patients' Health Information (4/14/2003)
• Privacy Education Materials from OCR
• OCR Publishes Fact Sheet on Filing Privacy Complaints (en Español)
• OCR Publishes Addresses for Privacy Complaints in the Federal Register (TXT | PDF) (3/20/2003)
• OCR Publishes Updated FAQs for Privacy Rule -- Go to HHS FAQ Web Site and enter a keyword or select the appropriate Category
• OCR Publishes Address for Notice for Submission of Requests for Preemption Exception Determinations (TXT | PDF) (3/11/2003)
• OCR -- Guidance for Modified Privacy Rule
• OCR -- Original Frequently Asked Questions about the HIPAA Privacy Rule (MS Word)
• Final Modifications to the Privacy Rule (8/14/2002)
  • Press Release
  • Fact Sheet
• Proposed Modifications to the Privacy Rule (NPRM) and Fact Sheet (3/27/2002)
• Preamble to the Original Privacy Final Rule: Part 1 | Part 2 | Part 3 | Part 4 (12/28/2000)
• Original Privacy Final Rule - Regulation Only (12/28/2000)
  • Technical corrections (12/29/2000)
  • Correction of effective and compliance dates (2/26/2001)
• First HHS Guidance on New Patient Privacy Protections
• HHS Privacy Fact Sheet

  Security

• HHS Guidance on HIPAA Security Regulations
• HIPAA Security Education Materials by CMS
• Final Security Rule (2/20/03)
• CMS Fact Sheet on Final Security Rule (2/24/2003)
• Proposed Security Rule - NPRM

  Enforcement

• Enforcement Final Rule (2/16/2006)
• Proposed HIPAA Enforcement Rule - NPRM (4/18/2005)
• Click here to file a Privacy compliance compliant with the Office of Civil Rights
• Click here to file an electronic complaint with the Centers for Medicare and Medicaid Services for non-Privacy compliance (i.e., HIPAA Transactions, Code Sets, Identifiers and Security)
• Click here for the non-Privacy paper complaint form for CMS
• Enforcement Process for Privacy Complaints
• Enforcement Procedures for Non-Privacy Complaints
• HHS Releases Interim Final Rule on Enforcement (4/15/2003)

  Top