Is PA-NEDSS HIPAA compliant?
Public health reporting is exempt from HIPAA regulations. The HIPAA privacy regulation permits access to individually, identifiable health information for appropriate public health use without further individual consent. PA-NEDSS includes standards for security and encryption of this data. PA-NEDSS data that is sent to the CDC as part of the weekly disease reporting process, including the Morbidity and Mortality Weekly Report (MMWR), do not include personal identifiers, and HIPAA compliant security standards will be maintained.
