HIPAA Privacy Rule (for Professionals)

20210116_rev01 · COMPARED WITH 20200903_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20200903_rev01 to 20210116_rev01

55The Privacy Rule is located at 45 CFR [Part 160](http://www.access.gpo.gov/nara/cfr/waisidx_07/45cfr160_07.html) and Subparts A and E of [Part 164](http://www.access.gpo.gov/nara/cfr/waisidx_07/45cfr164_07.html).
66
77[Click here to view the combined regulation text](https://hhs.gov/hipaa/for-professionals/privacy/laws-regulations/combined-regulation-text/index.html) of all HIPAA Administrative Simplification Regulations found at 45 CFR 160, 162, and 164.
88
99## Privacy Rule History
1010
11- December 10, 2020 - [Modifications to the HIPAA Privacy Rule to Empower Patients, Improve Coordinated Care, and Reduce Regulatory Burdens - Proposed Rule](https://hhs.gov/sites/default/files/hhs-ocr-hipaa-nprm.pdf)\*, \*\*
1112- December 14, 2018 - Modifying the HIPAA Rules to Improve Coordinated Care - Request for Information ([https://www.govinfo.gov/content/pkg/FR-2018-12-14/pdf/2018-27162.pdf](https://www.govinfo.gov/content/pkg/FR-2018-12-14/pdf/2018-27162.pdf))
1213- January 6, 2016 - [HIPAA Privacy Rule and the National Instant Criminal Background Check System (NICS) - Final Rule](https://www.govinfo.gov/content/pkg/FR-2016-01-06/pdf/2015-33181.pdf)
1314- February 6, 2014 - [Patients' Access to Test Reports Under the HIPAA Privacy Rule and the Clinical Laboratory Improvement Amendments of 1988 (CLIA) Program - Final Rule](https://www.govinfo.gov/content/pkg/FR-2014-02-06/pdf/2014-02280.pdf)
1415- January 7, 2014 - [HIPAA Privacy Rule and NICS - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2014-01-07/pdf/2014-00055.pdf)
1516- April 23, 2013 - [HIPAA Privacy Rule and NICS - Advance Notice of Proposed Rulemaking](https://www.govinfo.gov/content/pkg/FR-2013-04-23/pdf/2013-09602.pdf)
1617- January 25, 2013 - [Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules under the Health Information Technology for Economic and Clinical Health (HITECH) Act and the Genetic Information Nondiscrimination Act, and Other Modifications - Final Rule](https://www.govinfo.gov/content/pkg/FR-2013-01-25/pdf/2013-01073.pdf) (The "Omnibus HIPAA Final Rule")
2425- February 28, 2001 - [Request for Comments on December 28, 2000, Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/comment.txt) ([PDF](https://www.gpo.gov/fdsys/pkg/FR-2001-02-28/pdf/01-4811.pdf))
2526- February 26, 2001 - [Correction of Effective and Compliance Dates of the Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/dates.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/dates.pdf))
2627- December 29, 2000 - [Technical Corrections to the Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/pvcfix01.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/pvcfix01.pdf))
2728- December 28, 2000 - HIPAA Privacy Rule - Final Rule ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/prdecember2000all8parts.pdf))
2829- November 3, 1999 - HIPAA Privacy Rule - Proposed Rule ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/1999nprm.pdf))
2930
31_\* This HHS-approved document is being submitted to the Office of the Federal Register (OFR) for publication and has not yet been placed on public display or published in the Federal Register. This document may vary slightly from the published document if minor editorial changes are made during the OFR review process. The document published in the Federal Register is the official HHS-approved document._
32
33\*\* People using assistive technology may not be able to fully access information in this file. For assistance, contact the HHS Office for Civil Rights at (800) 368-1019, TDD toll-free: (800) 537-7697, or by emailing [OCRMail@hhs.gov](mailto:OCRMail@hhs.gov).
34
3035## Other Privacy Rule Notices
3136
3237- March 20, 2003 - Notice of Addresses for Submission of HIPAA Health Information Privacy Complaints ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/noticeaddresssubmission.pdf))
3338- March 11, 2003 - [Notice of Address for Submission of Requests for Preemption Exception Determinations](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/notice.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/notice.pdf))
3439- December 28, 2000 - [Statement of Delegation of Authority to the Office for Civil Rights](https://hhs.gov/hipaa/for-professionals/privacy/delegation-of-authority/index.html) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/fedreg.pdf))
3540
3641Content created by Office for Civil Rights (OCR)
37Content last reviewed on August 31, 2020
42Content last reviewed on December 10, 2020