Final Security Rule Delayed
Was scheduled to be published December 27, 2002

HIPAA's long-awaited Security rule was scheduled to be published on December 27, 2002 but has yet to be submitted to the Office of Management and Budget (OMB), according to a report by Modern Physician ( There had been no indication from CMS that the final rule would be delayed.

The Office of Management and Budget is the White House panel that reviews federal regulations for budgetary impact. The rule is expected to be delayed a minimum of 2 weeks since an OMB review generally takes at least that amount of time, longer on massive rulemakings like the security piece of HIPAA.

Modern Physician is also reporting that HHS has called in additional staff to fine-tune the language of the rule which would contribute to any delay.

Also scheduled to be published in the Federal Register on 12/27/02 was an addendum to the HIPAA regulations for transactions and code sets. This addendum was not released either and there is no indication from CMS when this will be finalized.

Posted to HIPAAcomply 10/15/02