SECOND ANNUAL REPORT TO CONGRESS
ON THE IMPLEMENTATION OF HIPAA

CONTENTS

Cover Letter

Executive Summary

I. Introduction

A. Background
B. Purpose of Report
C. Content of Report
D. Statutory Requirements

  1. Requirements for Standards
  2. Timetables
  3. Expanded Responsibilities for the NCVHS

II. Implementation Process

A.DHHS Implementation Strategy

HHS Data Council
Health Data Standards Committee
Implementation Teams
Proposed rules for public comment

B. Guiding Principles

C. Private Sector Consultation

D. NCVHS Hearings

E. Outreach to Public Health and Health Services Research

F. NCVHS Comments on NPRMs

G. NCVHS Liaison with HHS

III. Progress to Date

A. Standard Identifiers
B. Transaction Standards and Code Sets
C. Security and Electronic Signatures
D. Claims Attachments
E. Privacy
F. Implementation Plan and Communications Strategy

IV. Special Privacy and Security Concerns

A. Need for Federal Privacy Legislation
B. Linkage of Individual Identifier to Privacy Protections
C. Anti-Discrimination Measures are Needed
D. Security

V. Implementation Issues

A. Identifying and Resolving Standards Implementation Issues
B. Identifying Need for New Standards
C. Measurement of Standards Implementation Status
D. Strengthening the National Health Information Infrastructure to Improve Health Care Quality and Access and Reduce Costs

VI. Conclusion

VII. Additional Views