HHS also asked for public comment on the rule.
The stimulus law, and now the rule, significantly increased the maximum penalty cap for civil violations of HIPAA from $25,000 to $1.5 million for total violations of the same provision.
The law also removes a defense under HIPAA that barred HHS from imposing civil penalties on a so-called “covered entity” that could demonstrate “it did not know that it violated the HIPAA rules,” according to an HHS statement. Now, under the new rule, “A covered entity can no longer bar the imposition of a civil money penalty for an unknown violation unless it corrects the violation within 30 days of discovery,” according to the statement.
Copies of the proposed rule will be posted online.
The stimulus law gave HHS authority to impose civil money penalties for violations occurring after Feb. 18, but the new rule doesn't go into effect until Nov. 30. The public-comment period is open until Dec. 29.
What do you think? Post a comment on this article and share your opinion with other readers. Submit your comments to Modern Healthcare Online at [email protected]. Please be sure to include your hometown and state, along with your organization and title.