The 2009 economic stimulus bill, known as the American Recovery and Reinvestment Act (ARRA), significantly affects the health care industry by imposing more stringent and expansive requirements under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) privacy and security provisions, most especially on key players in the the health care industry while simultaneously strengthening the enforcement of such provisions. Title XIII of Division A and Title IV of Division of ARRA collectively are known as the "HITECH Act." Because the majority of ARRA's changes to HIPAA appear in Subtitle D of Title XIII of ARRA, entitled, "Privacy," Subtitle D will be the primary focus of this article, which highlights ARRA's major changes to the HIPAA privacy and security provisions and explores the implications of these sweeping changes for the health care industry.
Parver, Corrine. “How the American Recovery and Reinvestment Act of 2009 Changed HIPAA’s Privacy Requirements.” CCH Health Care Compliance Letter, July 28, 2009, 4-7.