Medical information privacy legislation given three-year deadline in insurance reform law.
Executive Summary
PRIVACY STANDARDS REGULATORY AUTHORITY GIVEN TO HHS if Congress does not pass legislation on medical information privacy within three years under the health insurance reform bill (HR 3103) conference agreement approved by the Senate Aug. 2 and the House Aug. 1. "If legislation governing standards with respect to the privacy of individually identifiable health information...is not enacted by the date that is 36 months after the date of the enactment of this act, [HHS] shall promulgate final regulations containing such standards not later than the date that is 42 months after the date of the enactment," the report on the conference agreement explains.