News Headlines Article

HHS withdraws final version of breach-notification rule from consideration
Modern Healthcare

HHS has withdrawn from administrative review a proposed final version of a federal rule that requires hospitals, physicians, health plans and other specified handlers of patient health records to notify patients in the event their personally identifiable health information is exposed by a data security breach.

In a notice posted on its website, HHS said it was withdrawing the final breach-notification rule from review by the Office of Management and Budget “to allow for further consideration, given the department’s experience to date in administering the regulations.”