HIPAA Compliance Plan
« Previous PagePublic Health Service Act ContentsNext Page »

Download a FREE copy of the HIPAA Survival Guide 4th Edition.

Sec. 3004. Process For Adoption of Endorsed Recommendations; Adoption of Initial Set of Standards, Implementation Specifications, and Certification Criteria.

(a) PROCESS FOR ADOPTION OF ENDORSED RECOMMENDATIONS.—

(1) REVIEW OF ENDORSED STANDARDS, IMPLEMENTATION SPECIFICATIONS, AND CERTIFICATION CRITERIA.—Not later than 90 days after the date of receipt of standards, implementation specifications, or certification criteria endorsed under section 3001(c), the Secretary, in consultation with representatives of other relevant Federal agencies, shall jointly review such standards, implementation specifications, or certification criteria and shall determine whether or not to propose adoption of such standards, implementation specifications, or certification criteria.

(2) DETERMINATION TO ADOPT STANDARDS, IMPLEMENTATION SPECIFICATIONS, AND CERTIFICATION CRITERIA.—If the Secretary determines—

(A) to propose adoption of any grouping of such standards, implementation specifications, or certification criteria, the Secretary shall, by regulation under section 553 of title 5, United States Code, determine whether or not to adopt such grouping of standards, implementation specifications, or certification criteria; or

(B) not to propose adoption of any grouping of standards, implementation specifications, or certification criteria, the Secretary shall notify the National Coordinator and the HIT Standards Committee in writing of such determination and the reasons for not proposing the adoption of such recommendation.

(3) PUBLICATION.—The Secretary shall provide for publication in the Federal Register of all determinations made by the Secretary under paragraph (1).

(b) ADOPTION OF STANDARDS, IMPLEMENTATION SPECIFICATIONS, AND CERTIFICATION CRITERIA.—

(1) IN GENERAL.—Not later than December 31, 2009, the Secretary shall, through the rulemaking process consistent with subsection (a)(2)(A), adopt an initial set of standards, implementation specifications, and certification criteria for the areas required for consideration under section 3002(b)(2)(B). The rulemaking for the initial set of standards, implementation specifications, and certification criteria may be issued on an interim, final basis.

(2) APPLICATION OF CURRENT STANDARDS, IMPLEMENTATION SPECIFICATIONS, AND CERTIFICATION CRITERIA.—The standards, implementation specifications, and certification criteria adopted before the date of the enactment of this title through the process existing through the Office of the National Coordinator for Health Information Technology may be applied towards meeting the requirement of paragraph (1).

(3) SUBSEQUENT STANDARDS ACTIVITY.—The Secretary shall adopt additional standards, implementation specifications, and certification criteria as necessary and consistent with the schedule published under section 3003(b)(2).

Download a FREE copy of our Breach Notification Training Module.

« Previous PagePublic Health Service Act ContentsNext Page »