Regulations

Transactions & Codes l Identifiers l Security l Privacy l Enforcement

CMS Administrative Simplification website
The Centers for Medicare and Medicaid Services' official Administrative Simplification website.

HHS Office for Civil Rights - HIPAA website

CMS HIPAA Information for Consumers

• Privacy and Your Health Information, August 17, 2004
• Your Health Information Privacy Rights, August 17, 2004
• How to File a Health Information Privacy Complaint
• HIPAA Online
  

Covered Entities

• Are you covered by HIPAA? CMS "Covered Entity Decision Tools"
  http://www.cms.hhs.gov/hipaa/hipaa2/support/tools/decisionsupport/default.asp
• CMS guidance for determining if you are covered - "Covered Entity Charts" (PDF)
  

Transactions & Codes

• FAQs on HIPAA Transactions from the Centers for Medicaid & Medicare Services
• WEDI Letter to HHS on TCS Implementation, March 8, 2004 (PDF)
• CMS Medicare Contigency, February 27, 2004 (Word)
• Companion Guides for NC Payers
• Contingency Plans: CMS l Blue Cross and Blue Shield
• Letter from NC Department of Insurance on HIPAA TCS Compliance, October 30, 2003 (PDF)
• HIPAA Information Series for Providers
• Interim Rule on Electronic Submission of Medicare Claims, August 15, 2003 (PDF)
• CMS Guidance on Compliance with the HIPAA Transactions and Code Sets, July 24, 2003 (PDF)
• Letter from Tom Scully to Medicare Providers on October 16 deadline, July 18, 2003 (PDF)
• Letter from NCVHS to HHS Secretary on October 16, 2003 implementation deadline, June 25, 2003 (Word)
• Final Modification to Electronic Transactions & Code Sets, Published February 20, 2003 (PDF)
  • Corrections to Federal Register, Published March 10, 2003 (PDF)
  • Double-spaced version (correct), Published February 20, 2003 (PDF)
• HIPAA Fact Sheet on the Modifications to the Electronic Transactions & Code Sets Requirements, February 24, 2003 (Word)
  
• Forms to file complaints about covered entities not compliant with the HIPAA
  electronic transactions and code set standards: electronic format l PDF format
• Transactions-Codes Final Rule, Published August 17, 2000

Identifiers

• NCHICA Letter to NCVHS on NPI Dissemination, January 22, 2007 (PDF)
• National Provider Identifier Final Rule, Published January 23, 2004 (PDF)
• Unique Employer Identifier Final Rule, Published May 31, 2002
• NPRM on Identifiers, Published May 7, 1998
• Presentation on NPI by Patricia Peyton (CMS), February 4, 2004 (PDF)

Security

• FAQs on HIPAA Security from the Centers for Medicare & Medicaid Services
• Security 101 for Covered Entities, Published by CMS, November 2004 (PDF)
• HIPAA Security Rule Matrix, October 12, 2004 (Excel)
  
• Final Security Rule, Published on CMS site February 12, 2003 (PDF)
• Combined Privacy and Security Rules, Published by HHS on April 17, 2003 (PDF)
• HIPAA Fact Sheet on the Security Standards Final Rule, February 24, 2003 (Word)

Privacy

• HIPAA Administrative Simplification Regulation, as amended through February 16, 2006 (PDF)
• FAQs on HIPAA Privacy from the HHS Office of Civil Rights
• To subscribe to OCR's listserve on HIPAA Privacy, click here.
• OCR Letter to HIPAA GIVES on the Privacy Rule and Child Protection Services and Adult Protection Services, December 2004 (PDF)
• Combined Privacy and Security Regulations, Published by HHS April 17, 2003 (PDF)
• HIPAA Privacy Rule and Public Health (Guidance from CDC and HHS), April 11, 2003
• HHS Guidance on Significant Aspects of Privacy Rule, December 4, 2002
  

Enforcement

• NCHICA comments on Enforcement NPRM, June 16, 2005
• HIPAA Enforcement NPRM, Published in the Federal Register April 18, 2005
• Enforcement Rule Extended, Published in the Federal Register September 15, 2004
• Interim Enforcement Rule, Published on HHS site April 15, 2003
• AHA Comments on HIPAA Enforcement Rule, June 16, 2003

Click here to view the HIPAA Regulation Archives

NPRM = Notice of Proposed Rule Making