Why were the topics of civil and criminal penalties added to the standard on security training?
Response: The Privacy provisions outlined in President Obama’s economic stimulus package, the “American Recovery and Reinvestment Act” (ARRA) include civil and criminal penalties which require organizations to provide training on the various penalties, the fine amount and under what circumstances they apply. In addition, ARRA has specific guidelines expanding the enforcement powers of State Attorneys General. Under the new regulations, State Attorneys General may work on behalf of state’s residents to bring civil actions, stop violations, or obtain damages. Although state action is limited while federal action is pending, this applies to all covered entities, business associates and now individuals, with access to private patient information.
