At this time, the final HIPAA regulations implementing the HITECH Act have not been published. When they are published, HIOs must quickly get up to speed on the provisions in the final regulation. A link will be included here to the final regulation when it is released.

The meaningful use stage 2 regulations also are under development, and the final provisions are not currently known. HIOs should remain aware that additional objectives and measures for the privacy and security policy priority area are anticipated. The HIT Privacy and Security Tiger Team, part of the HIT Policy Committee advising ONC on meaningful use, recommended the application of Fair Information Practice principles to third party service organizations, including business associates like HIOs, to promote trust in health information exchange.  To see the teams full recommendations, click here.