HIPAA in 2021: Proposed Changes to Modify Privacy Rule

On December 10, 2020, HHS announced proposed revisions to the HIPAA Privacy Rule that would significantly impact covered entities under HIPAA. The Proposed Rule is part of HHS’s Regulatory Sprint to Coordinated Care, which seeks to “promote value-based care by examining federal regulations that impede efforts among health care providers and health plans to better coordinate care for patients.”

Watch the Recording

ICYMI, watch the recorded webinar, where two privacy and security experts examine key provisions outlined in the rule. They also discussed what healthcare providers can expect under the new Biden administration including steps to take in preparation for the final rule.

You will hear:

  • Strengthening patients right to access their PHI including provisions addressing EHRs and personal health applications.
  • Clarifies the definition of “health care operations”.
  • Creates an exception to the minimum necessary standard for individual-level care coordination and case management uses and disclosures.
  • Clarifies Covered Entities’ abilities to disclose PHI to social service agencies, community-based organizations, home- and community-based services (HCBS) providers and others.
  • Eases the standard that permits covered entities to make certain uses and disclosures of PHI based on their professional judgment.
  • Expands ability of covered entities to disclose PHI to avert a threat to health or safety.
  • Modifies patients written acknowledgement of receipt of the notice of privacy practices (NPP)
  • Permits disclosure to Telecommunications Relay Services communications assistance without a business associate agreement.


Lee Barrett
Executive Director and Chief Executive Officer, EHNAC

Brad Spannbauer
HIPAA Privacy & Compliance Officer, J2 Global