How do the HIPAA privacy regulations constrain what NEDSS can do, if at all?
The HIPAA privacy regulation permits access to individually, identifiable health information for appropriate public health uses without further individual consent. NEDSS includes standards for security and encryption of these data that are HIPAA compliant. In addition, at the CDC level, NEDSS data will not include personal identifiers, and HIPAA compliant security standards will be maintained.
