The HIPAA Privacy Rule: Reviewing the Post-Compliance Impact on Public Health Practice and Research

Current economic conditions have coincided with the implementation of the Health Insurance Portability and Accountability Act (HIPAA) and forced public health officials to consider how to ethically incorporate compliance into their already strained budgets, while maintaining the integrity and intent of the legislation. As of April 14, 2003, the HIPAA Privacy Rule provides a new federal floor of protections for personal health information. The Privacy Rule establishes standards for the protection of health information held by many physicians’ offices, health plans, and health care clearinghouses. The Rule protects personal health information by establishing conditions regulating the use and disclosure of individually identifiable health information by these entities, also referred to as covered entities. The Rule does not prevent the daily operations of health care establishments (i.e., the treatment of patients and the collection of payment).