HIPAA Title  
HIPAA Title Title Bar
HIPAA Title   Question Title Bar Disclaimer Title Bar FAQ Title Bar Search Title Bar
Title Bar Title Bar
Title Bar Title Bar
Title Bar
HIPAA Timeline
May 23, 2008 National Provider Identifier Compliance Deadline for Small Health Plans and the end of NPI Contingency Period
May 23, 2007 National Provider Identifier Compliance Deadline
April 21, 2005 Security Compliance Deadline
July 30, 2004 Standard Unique Employer Identifier compliance deadline
October 16, 2003 Transaction and Code Sets - expected date of compliance for small health plans and covered entities that filed a compliance plan to delay implementation
August 15, 2003 Interim Final Rule: Electronic Submission of Medicare Claims published
April 16, 2003 Interim Final Rule: Civil Money Penalties Procedures published
April 14, 2003 Privacy compliance deadline
February 20, 2003 Security Standards published
February 20, 2003 Modifications to Transactions and Code Sets Regulation and Implementation Guide Addenda Published
October 16, 2002 Transaction and Code Sets - expected date of compliance for covered entities that did not file a compliance plan to delay implementation
August 14, 2002 Final modifications to the Privacy Rule published
May 31, 2002 CMS announced the adoption of the EIN as the standard unique identifier for employers in the filing and processing of health care claims and other transactions.
December 28, 2000 Privacy Final Rule Published
August 17, 2000 Transaction and Code Sets Final Rule Published
February 21, 2000 Deadline for DHHS Secretary to publish privacy standards for individually identifiable health information.
February 17, 2000 Extended deadline for comment period on Privacy Standards for Individually Identifiable Health Information.
January 3, 2000 60 day comment period on Privacy Standards for Individually Identifiable Health Information ends.
November 3, 1999 Privacy Standards for Individually Identifiable Health Information is published in Federal Register
October 29, 1999 Clinton Administration Announces Proposed Rules --Privacy Standards for Individually Identifiable Health Information.
August 21, 1999 Deadline for Congress to enact legislation governing the privacy of individually identifiable health information standards. Because Congress failed to meet the deadline, HIPAA requires the Secretary of Health and Human Services to promulgate such standards by regulation.
November 3, 1999 Privacy NRPM published
August 12, 1998 Security NRPM published.
June 16, 1998 National Employer Identifier NRPM published
May 7, 1998 National Provider Identifier NRPM published
Transactions and Code Sets NRPM published

* Please note :

The NRPM's below have been published and are still awaiting dates for expected final rule publication and expected date of compliance:
  • National Provider Identifier
  • Security
The following NRPM's are still in development and have no expected date for publication, final rule publication and compliance:
  • National Health Plan Identifier
  • Claims Attachments
  • Enforcement
  • National Individual Identifier (on hold)

NC DHHS HIPAA Web Site