What are the effective and compliance dates?
The privacy rule became effective on April 14, 2001. Compliance with the rule is required by two years after the effective date, which means providers need to be in compliance by April 14, 2003. The security rule is not out yet in final form, but the general principles are known. Compliance with the security portion will also be required by April 14, 2003. If you electronically transmit and receive any health care claim, payment, enrollment, eligibility, referral authorization, etc, you are also covered by the transaction code set portion of the regulation. Even if you do not transmit electronically yourself, you are still covered if claims information is electronically transmitted on your behalf. The deadline for the transaction code sets is October 16, 2002. If you can’t comply by that time, you must file for an extension for the transaction code sets that expires October 16, 2003. There is no extension available for the privacy/security regulations. 5. I am not a covered provider, s