What laws does the Privacy Study address?
The Privacy Study consists of a database which includes summaries of state laws and regulations that relate to the privacy or confidentiality of health information. It does not include all state privacy laws, so for example, rules relating to privacy of financial records are not included. In addition, the database does not include the law governing workers’ compensation in our analysis, since that is generally excluded from the HIPAA privacy rule. With regard to laws and regulations governing health information privacy, the Privacy Study does not review all health care laws and regulations that relate to the use of information, but rather only those that address privacy or confidentiality in some way. For example, a regulation requiring physicians to submit claims for payment to a state Medicaid program in a particular manner is not included, nor are laws requiring insurers to maintain records of claims for a certain number of years. However, a law requiring a hospital to provide Medic
