HIPAA Compliance Plan
« Previous PagePublic Health Service Act ContentsNext Page »

Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.

Sec. 3001. Office of the National Coordinator For Health Information Technology.

(a) ESTABLISHMENT.—There is established within the Department of Health and Human Services an Office of the National Coordinator for Health Information Technology (referred to in this section as the ‘Office’). The Office shall be headed by a National Coordinator who shall be appointed by the Secretary and shall report directly to the Secretary.

(b) PURPOSE.—The National Coordinator shall perform the duties under subsection (c) in a manner consistent with the development of a nationwide health information technology infrastructure that allows for the electronic use and exchange of information and that—

(1) ensures that each patient’s health information is secure and protected, in accordance with applicable law;

(2) improves health care quality, reduces medical errors, reduces health disparities, and advances the delivery of patientcentered medical care;

(3) reduces health care costs resulting from inefficiency, medical errors, inappropriate care, duplicative care, and incomplete information;

(4) provides appropriate information to help guide medical decisions at the time and place of care;

(5) ensures the inclusion of meaningful public input in such development of such infrastructure;

(6) improves the coordination of care and information among hospitals, laboratories, physician offices, and other entities through an effective infrastructure for the secure and authorized exchange of health care information;

(7) improves public health activities and facilitates the early identification and rapid response to public health threats and emergencies, including bioterror events and infectious disease outbreaks;

(8) facilitates health and clinical research and health care quality;

(9) promotes early detection, prevention, and management of chronic diseases;

(10) promotes a more effective marketplace, greater competition, greater systems analysis, increased consumer choice, and improved outcomes in health care services; and

(11) improves efforts to reduce health disparities.


(1) STANDARDS.—The National Coordinator shall—

(A) review and determine whether to endorse each standard, implementation specification, and certification criterion for the electronic exchange and use of health information that is recommended by the HIT Standards Committee under section 3003 for purposes of adoption under section 3004;

(B) make such determinations under subparagraph (A), and report to the Secretary such determinations, not later than 45 days after the date the recommendation is received by the Coordinator; and

(C) review Federal health information technology investments to ensure that Federal health information technology programs are meeting the objectives of the strategic plan published under paragraph (3).


(A) IN GENERAL.—The National Coordinator shall coordinate health information technology policy and programs of the Department with those of other relevant executive branch agencies with a goal of avoiding duplication of efforts and of helping to ensure that each agency undertakes health information technology activities primarily within the areas of its greatest expertise and technical capability and in a manner towards a coordinated national goal.

(B) HIT POLICY AND STANDARDS COMMITTEES.—The National Coordinator shall be a leading member in the establishment and operations of the HIT Policy Committee and the HIT Standards Committee and shall serve as a liaison among those two Committees and the Federal Government.


(A) IN GENERAL.—The National Coordinator shall, in consultation with other appropriate Federal agencies (including the National Institute of Standards and Technology), update the Federal Health IT Strategic Plan (developed as of June 3, 2008) to include specific objectives, milestones, and metrics with respect to the following:

(i) The electronic exchange and use of health information and the enterprise integration of such information.

(ii) The utilization of an electronic health record for each person in the United States by 2014.

(iii) The incorporation of privacy and security protections for the electronic exchange of an individual’s individually identifiable health information.

(iv) Ensuring security methods to ensure appropriate authorization and electronic authentication of health information and specifying technologies or methodologies for rendering health information unusable, unreadable, or indecipherable.

(v) Specifying a framework for coordination and flow of recommendations and policies under this subtitle among the Secretary, the National Coordinator, the HIT Policy Committee, the HIT Standards Committee, and other health information exchanges and other relevant entities.

(vi) Methods to foster the public understanding of health information technology.

(vii) Strategies to enhance the use of health information technology in improving the quality of health care, reducing medical errors, reducing health disparities, improving public health, increasing prevention and coordination with community resources, and improving the continuity of care among health care settings.

(viii) Specific plans for ensuring that populations with unique needs, such as children, are appropriately addressed in the technology design, as appropriate, which may include technology that automates enrollment and retention for eligible individuals.

(B) COLLABORATION.—The strategic plan shall be updated through collaboration of public and private entities.

(C) MEASURABLE OUTCOME GOALS.—The strategic plan update shall include measurable outcome goals.

(D) PUBLICATION.—The National Coordinator shall republish the strategic plan, including all updates.

(4) WEBSITE.—The National Coordinator shall maintain and frequently update an Internet website on which there is posted information on the work, schedules, reports, recommendations, and other information to ensure transparency in promotion of a nationwide health information technology infrastructure.


(A) IN GENERAL.—The National Coordinator, in consultation with the Director of the National Institute of Standards and Technology, shall keep or recognize a program or programs for the voluntary certification of health information technology as being in compliance with applicable certification criteria adopted under this subtitle. Such program shall include, as appropriate, testing of the technology in accordance with section 13201(b) of the Health Information Technology for Economic and Clinical Health Act.

(B) CERTIFICATION CRITERIA DESCRIBED.—In this title, the term ‘certification criteria’ means, with respect to standards and implementation specifications for health information technology, criteria to establish that the technology meets such standards and implementation specifications.


(A) REPORT ON ADDITIONAL FUNDING OR AUTHORITY NEEDED.—Not later than 12 months after the date of the enactment of this title, the National Coordinator shall submit to the appropriate committees of jurisdiction of the House of Representatives and the Senate a report on any additional funding or authority the Coordinator or the HIT Policy Committee or HIT Standards Committee requires to evaluate and develop standards, implementation specifications, and certification criteria, or to achieve full participation of stakeholders in the adoption of a nationwide health information technology infrastructure that allows for the electronic use and exchange of health information.

(B) IMPLEMENTATION REPORT.—The National Coordinator shall prepare a report that identifies lessons learned from major public and private health care systems in their implementation of health information technology, including information on whether the technologies and practices developed by such systems may be applicable to and usable in whole or in part by other health care providers.

(C) ASSESSMENT OF IMPACT OF HIT ON COMMUNITIES WITH HEALTH DISPARITIES AND UNINSURED, UNDERINSURED, AND MEDICALLY UNDERSERVED AREAS.—The National Coordinator shall assess and publish the impact of health information technology in communities with health disparities and in areas with a high proportion of individuals who are uninsured, underinsured, and medically underserved individuals (including urban and rural areas) and identify practices to increase the adoption of such technology by health care providers in such communities, and the use of health information technology to reduce and better manage chronic diseases.

(D) EVALUATION OF BENEFITS AND COSTS OF THE ELECTRONIC USE AND EXCHANGE OF HEALTH INFORMATION.—The National Coordinator shall evaluate and publish evidence on the benefits and costs of the electronic use and exchange of health information and assess to whom these benefits and costs accrue.

(E) RESOURCE REQUIREMENTS.—The National Coordinator shall estimate and publish resources required annually to reach the goal of utilization of an electronic health record for each person in the United States by 2014, including—

(i) the required level of Federal funding;

(ii) expectations for regional, State, and private investment;

(iii) the expected contributions by volunteers to activities for the utilization of such records; and

(iv) the resources needed to establish a health information technology workforce sufficient to support this effort (including education programs in medical informatics and health information management).

(7) ASSISTANCE.—The National Coordinator may provide financial assistance to consumer advocacy groups and not-forprofit entities that work in the public interest for purposes of defraying the cost to such groups and entities to participate under, whether in whole or in part, the National Technology Transfer Act of 1995 (15 U.S.C. 272 note).

(8) GOVERNANCE FOR NATIONWIDE HEALTH INFORMATION NETWORK.—The National Coordinator shall establish a governance mechanism for the nationwide health information network.


(1) IN GENERAL.—Upon the request of the National Coordinator, the head of any Federal agency is authorized to detail, with or without reimbursement from the Office, any of the personnel of such agency to the Office to assist it in carrying out its duties under this section.

(2) EFFECT OF DETAIL.—Any detail of personnel under paragraph (1) shall—

(A) not interrupt or otherwise affect the civil service status or privileges of the Federal employee; and

(B) be in addition to any other staff of the Department employed by the National Coordinator.

(3) ACCEPTANCE OF DETAILEES.—Notwithstanding any other provision of law, the Office may accept detailed personnel from other Federal agencies without regard to whether the agency described under paragraph (1) is reimbursed.

(e) CHIEF PRIVACY OFFICER OF THE OFFICE OF THE NATIONAL COORDINATOR.—Not later than 12 months after the date of the enactment of this title, the Secretary shall appoint a Chief Privacy Officer of the Office of the National Coordinator, whose duty it shall be to advise the National Coordinator on privacy, security, and data stewardship of electronic health information and to coordinate with other Federal agencies (and similar privacy officers in such agencies), with State and regional efforts, and with foreign countries with regard to the privacy, security, and data stewardship of electronic individually identifiable health information.

Download a FREE copy of the HIPAA Survival Guide 4th Edition.

« Previous PagePublic Health Service Act ContentsNext Page »