No. 42784 (5-year Review): Rule R380-250. HIPAA Privacy Rule Implementation

DAR File No.: 42784
Filed: 04/10/2018 11:24:31 AM

NOTICE OF REVIEW AND STATEMENT OF CONTINUATION

Concise explanation of the particular statutory provisions under which the rule is enacted and how these provisions authorize or require the rule:

Section 26-1-5 grants the Department of Health (Department) the power to adopt, amend, or rescind rules, and Section 26-1-17 implements standards of employee conduct that safeguard protected health information (PHI).

Summary of written comments received during and since the last five-year review of the rule from interested persons supporting or opposing the rule:

The Department did not receive any written or oral comments regarding this rule.

Reasoned justification for continuation of the rule, including reasons why the agency disagrees with comments in opposition to the rule, if any:

The Department will continue this rule because it safeguards health information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and because it allows individuals to access their PHI, request to amend or restrict their PHI, request an accounting of disclosures, and to file a complaint over a HIPAA violation.

The full text of this rule may be inspected, during regular business hours, at the Office of Administrative Rules, or at:

Health
Administration
CANNON HEALTH BLDG
288 N 1460 W
SALT LAKE CITY, UT 84116-3231

Direct questions regarding this rule to:

• Craig Devashrayee at the above address, by phone at 801-538-6641, by FAX at 801-538-6099, or by Internet E-mail at [e-mail]

Effective:

04/10/2018

Authorized by:

Joseph Miner, Executive Director

---