(withthanks to Jim Pyles, Attorney currently preparing a suit against HHS
concerningthe elimination of “consent”. See Legal Challenges to HIPAA at this site.)
A. August21, 1996 - Health InsurancePortability and Accountability Act enacted, section 264 requires Congress, byAugust 21, 1999, or the Secretary of HHS, by February 21,2000, to establish therights that individuals “should have” with respect to individuallyidentifiable health information.
B. September11, 1997 - Secretary of HHSsubmits recommendations to Congress with respect to privacy rights andstandards.
C. November3, 1999 - HHS issuesproposed Privacy Rule to implement section 264 of HIPAA. 64 Fed. Reg. 59,918.
D. December15, 1999 - HHS extendscomment period by more than 30 days. 64Fed. Reg. 69981.
E. December28, 2000 - HHS issues finalPrivacy Rule implementing section 264 of HIPAA, with an effective date ofFebruary 26, 2001. 65 Fed. Reg.82,462.
F. February26, 2001 - HHS, under BushAdministration, delays the effective date to April 14, 2001 in order to provideCongress an opportunity to review the Rule under the Congressional Review Act.
66Fed. Reg. 12,434.
G. February28, 2001 - HHS reopenscomment period of Privacy Rule for another 30 days. 66 Fed. Reg. 12,738.
H. April12, 2001 - HHS announcesthat the Privacy Rule will be put into effect on April 14, 2001 stating that“The President considers this a tremendous victory for Americanconsumers…” (Statement by HHSSecretary Tommy G. Thompson, April 12, 2001); 65 Fed. Reg. 12,433.
I. March27, 2002 - HHS proposesmajor changes in Privacy Rule and provides 30-day comment period. 67 Fed. Reg. 14,776.
J. August14, 2002- HHS publishesfinal amendments to Privacy Rule reversing policy announced on April 12, 2001. 67 Fed. Reg. 53,182.
K. February20, 2003– HHS publishes ? final Security and Transaction Rules