{"abstract":"The Department of Health and Human Services (HHS or \"the Department\") is issuing this final rule to: Modify the Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Enforcement Rules to implement statutory amendments under the Health Information Technology for Economic and Clinical Health Act (\"the HITECH Act\" or \"the Act\") to strengthen the privacy and security protection for individuals' health information; modify the rule for Breach Notification for Unsecured Protected Health Information (Breach Notification Rule) under the HITECH Act to address public comment received on the interim final rule; modify the HIPAA Privacy Rule to strengthen the privacy protections for genetic information by implementing section 105 of Title I of the Genetic Information Nondiscrimination Act of 2008 (GINA); and make certain other modifications to the HIPAA Privacy, Security, Breach Notification, and Enforcement Rules (the HIPAA Rules) to improve their workability and effectiveness and to increase flexibility for and decrease burden on the regulated entities.","action":"Final rule.","agencies":[{"raw_name":"DEPARTMENT OF HEALTH AND HUMAN SERVICES","name":"Health and Human Services Department","id":221,"url":"https://www.federalregister.gov/agencies/health-and-human-services-department","json_url":"https://www.federalregister.gov/api/v1/agencies/221","parent_id":null,"slug":"health-and-human-services-department"},{"raw_name":"Office of the Secretary"}],"body_html_url":"https://www.federalregister.gov/documents/full_text/html/2013/01/25/2013-01073.html","cfr_references":[{"chapter":null,"citation_url":null,"part":160,"title":45},{"chapter":null,"citation_url":null,"part":164,"title":45}],"citation":"78 FR 5566","comment_url":null,"comments_close_on":null,"correction_of":null,"corrections":[],"dates":"Effective date: This final rule is effective on March 26, 2013.","disposition_notes":null,"docket_ids":[],"dockets":[],"document_number":"2013-01073","effective_on":"2013-03-26","end_page":5702,"executive_order_notes":null,"executive_order_number":null,"explanation":null,"full_text_xml_url":"https://www.federalregister.gov/documents/full_text/xml/2013/01/25/2013-01073.xml","html_url":"https://www.federalregister.gov/documents/2013/01/25/2013-01073/modifications-to-the-hipaa-privacy-security-enforcement-and-breach-notification-rules-under-the","images":{},"images_metadata":{},"json_url":"https://www.federalregister.gov/api/v1/documents/2013-01073?publication_date=2013-01-25","mods_url":"https://www.govinfo.gov/metadata/granule/FR-2013-01-25/2013-01073/mods.xml","not_received_for_publication":null,"page_length":137,"page_views":{"count":211433,"last_updated":"2026-05-24 10:15:03 -0400"},"pdf_url":"https://www.govinfo.gov/content/pkg/FR-2013-01-25/pdf/2013-01073.pdf","presidential_document_number":null,"proclamation_number":null,"public_inspection_pdf_url":"https://public-inspection.federalregister.gov/2013-01073.pdf?1358457430","publication_date":"2013-01-25","raw_text_url":"https://www.federalregister.gov/documents/full_text/text/2013/01/25/2013-01073.txt","regulation_id_number_info":{"0945-AA03":{"issue":"201110","html_url":"https://www.federalregister.gov/regulations/0945-AA03/modifications-to-the-hipaa-privacy-security-enforcement-and-breach-notification-rules","title":"Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules","xml_url":"http://www.reginfo.gov/public/do/eAgendaViewRule?pubId=201110&RIN=0945-AA03&operation=OPERATION_EXPORT_XML","priority_category":"Economically Significant"}},"regulation_id_numbers":["0945-AA03"],"regulations_dot_gov_info":{"supporting_documents":[],"comments_count":0,"agency_id":"HHS","comments_url":"https://www.regulations.gov/docketBrowser?rpp=50&so=DESC&sb=postedDate&po=0&dct=PS&D=HHS-OS-2022-0008","supporting_documents_count":0,"docket_id":"HHS-OS-2022-0008","document_id":"HHS-OS-2022-0008-0361","regulation_id_number":null,"title":"HHS 2022 Archive","checked_regulationsdotgov_at":"2022-05-28T03:30:05Z"},"regulations_dot_gov_url":null,"significant":true,"signing_date":null,"start_page":5566,"subtype":null,"title":"Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the Health Information Technology for Economic and Clinical Health Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules","toc_doc":"HIPAA Privacy, Security, Enforcement, and Breach Notification Rules","toc_subject":null,"topics":["Administrative practice and procedure","Computer technology","Employee benefit plans","Health","Health care","Health facilities","Health insurance","Health records","Hospitals","Investigations","Medicaid","Medical research","Medicare","Penalties","Privacy","Reporting and recordkeeping requirements"],"type":"Rule","volume":78}