Why was this standard added to the HIPAA Privacy standards (v3.0) and how will URAC evaluate “nominal” reimbursement?
Response: The standard reflects a requirement under the HITECH Act and though “nominal” is not specifically defined URAC will examine a breakdown of the organization’s charges for providing the protected information to another entity that seeks to use it for marketing purposes. The breakdown must include how much it cost the organization to provide the information, apart from any other charges. Evidence must be provided upon desktop review.
Related Questions
- URAC has added a new section to both the HIPAA Privacy and Security standards related to breach processing. What was the impetus for this?
- Why were the HIPAA Privacy standards for business associates and covered entities combined into one (1) accreditation?
- Doesnt the HIPAA Privacy Rule minimum necessary standard conflict with the HIPAA transaction standards?
