Law Commons^™

Not So Hip?: The Expanded Burdens On And Consequences To Law Firms As Business Associates Under Hitech Modifications To Hipaa, Benjamin K. Hoover

Law Student Publications

The Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) governs the management of protected health information (“PHI”) by covered entities (e.g., health care providers) and their business associates. However, the Health Information Technology for Economic and Clinical Health Act (“HITECH”), contained within the American Recovery and Reinvestment Act of 2009, drastically alters the scope of HIPAA regulations with regard to business associates, including law firms that routinely handle the PHI governed by HIPAA. Under the HITECH Act, the definition of “business associate” is expanded, and these entities are treated as “covered” for purposes of the HIPAA security regulations; this …