Drinker Biddle & Reath released a client alert summarizing some of the highlights of the HIPAA Omnibus Rule, released by the Department of Health and Human Services (HHS) on Thursday.  A few items of note:

• The definition of protected health information has been amended so as to exclude information on a person who has been deceased for more than 50 years.
• The rule expands the definition of “business associate” to include additional entities and clarifies that business associates are directly liable under HIPAA.
• Covered entities will have to modify their Notice of Privacy Practices.
• Patients are provided additional rights under the final rule.  Marketing standards are strengthened. 

A copy of the client alert can be found here.  In the coming weeks, we will be publishing a series of client alerts addressing in more depth specific provisions of the Final Rule.  Stay tuned for more information.