Important HIPAA Information and Documents

KnowHIPAA.com will continue to add important resource information to this page.  Many of the files are .pdf documents.  You will need Adobe Acrobat installed in your computer to view these files. A free copy of Adobe Acrobat Reader can be downloaded from Adobe at www.adobe.com

HIPAA Compliance Solutions for Business Associates and Employers

The HITECH Act made significant changes to the HIPAA Privacy and Security requirements including making business associates directly subject to the law for the first time.  KnowHIPAA.com provides a comprehensive set of solutions to help you comply with the new rules including consulting and comprehensive HIPAA manuals.  For more information go to our solutions page.

KnowHIPAA.com Resource Documents

HIPAA Security Series from the Centers for Medicare & Medicaid Services (CMS)

The CMS has published a very helpful 6 part guide to the HIPAA Security Rules. 

Download each part:

Part 1 - Security 101 for Covered Entities

Part 2 - Security Standards: Administrative Safeguards

Part 3 - Security Standards: Physical Safeguards

Part 4 - Security Standards: Technical Safeguards

Part 5 - Security Standards: Organizational, Policies and Procedures and Documentation Requirements

Part 6 - Basics of Risk Analysis and Risk Management

Article on HIPAA and Section 125 Medical Flexible Spending Accounts. (January 2004)  Click here to download a copy.

Article on the Problem with TPAs just amending an employer's plan document. (February 2004)  Click here to download a copy.

Employer Health Plans and HIPAA Privacy. 

Privacy Rules and Regulations and Other Guidance

Please be patient.  Large files may take a few minutes to download if you are using a dial-up connection.

Complete HIPAA Privacy Regulation as published by OCR  October 2002 (42 pages)

Updated OCR Privacy Guidance 5/20/03. (25 pages)

Final HIPAA Security Regulations  Published in The Federal Register 2/20/03. (49 pages)

DHHS OCR Privacy Guidance Privacy guidance and FAQs released by HHS Office of Civil Rights 12/03/02 (123 pages).

12/28/2000 Final Rules Department of Health and Human Services Privacy Standards Final Rule published in the Federal Register December 28, 2000.  Includes DHHS preamble discussion of the rules and responses to public comments (369 pages).

08/14/2002 Final Rules Department of Health and Human Services Privacy Standards Final Rule published in the Federal Register August  14, 2002.  Includes DHHS preamble discussion of the rules and responses to public comments (93 pages).

Model Business Associate Language Pages from August 2002 regulations which contain model business associate language

Privacy Links

HHS HIPAA Administrative Simplification Site Site contains information and links on HIPAA Privacy, Security and Transaction Rules

DHHS Office of Civil Rights The Department of Health and Human Services Office of Civil Rights (OCR) is responsible for the Enforcement of the HIPAA Privacy standards. 

WEDI/SNIP A collaborative healthcare industry process for the development and implementation of standards. Site includes white papers on transactions, security, and privacy.