HIPAAlinks: Government
Federal, States & Territories

Federal

Department of Health and Human Services (HHS)

http://aspe.hhs.gov/admnsimp

Consider this your official starting point for access to HIPAA documentation submitted to or by the government. This Administrative Simplification site offers calendars, proposed rules, implementation timetables, news, meeting minutes, full text regulatory documents and FAQs on HIPAA. It also has published the public comments to all proposed HIPAA regulations.

http://aspe.hh.gov/admnsimp/lsnotify.htm

Stay informed about the latest updates and publication from HHS and HIPAA. This link lets you sign up for a HHS listserve that notifies members when documents related to regs such as NPRMs are published or posted on the site.

http://aspe.hhs.gov/datacncl/

The HHS Data Council coordinates all health and non-health data collection and analysis activities of the Department of Health and Human Service. This includes an integrated health data collection strategy, coordination of health data standards and health information and privacy policy activities.

http://aspe.hhs.gov/admnsimp/asmiles.htm

Review a historical snapshot of the evolution of information standards. This page provides a history of "Milestone Dates in Health Information Standards" that have achieved by DHHS and the administration.

http://www.ihs.gov/AdminMngrResources/HIPAA/index.cfm

The Indian Health Service HIPAA compliance project site, including IHS Matrices and Checklists, a PowerPoint presentation on the status of HIPAA compliance in the Indian Health Service, a flyer that provides an overview of the HIPAA legislation and its potential impact on the Indian health community, as well as a list of the current Indian Health Service HIPAA forms and policy/procedures that are under development.

Office for Civil Rights - in charge of enforcing the HIPAA Privacy Rule

http://www.hhs.gov/ocr/hipaa/

This site provides information on Medical Privacy - National Standards to Protect the Privacy of Personal Health Information.

Centers for Medicare & Medicaid Services (formerly Health Care Financing Administration) - in charge of enforcing all other HIPAA standards

http://cms.hhs.gov/hipaa/hipaa2/

This site provides information on unique identifiers and the Administrative Simplification aspect of HIPAA.

http://cms.hhs.gov/medicaid/hipaa/adminsim/

Review the insurance reform mandates administered by CMS under the broad scope of HIPAA, previous to today's focus on Administrative Simplification. This site includes Medicaid HIPAA Plus, the Medicaid HIPAA Compliant/Concept Model, HIPAA-related Links, Informational briefs

http://cms.hhs.gov/hipaa/hipaa1/content/regulations.asp

Need more information about the insurance reform mandates? Then review CMS site for presentation of the health insurance reform regulations that HIPAA requires, with links to the Federal Register documents.

Find quick links to other web sites that offer Administrative Simplification information, from the standards organizations and work groups involved with the development of HIPAA Standards.

http://cms.hhs.gov/providers/edi/

Find quick links to other web sites that offer Administrative Simplification information, from the standards organizations and work groups involved with the development of HIPAA Standards.

http://cms.hhs.gov/hipaa/hipaa2/npi.pdf

Investigate the background and development of the HCFA initiative for a National Provider Identifier as the standard health care provider identifier as required by HIPAA.

FAQs from HHS:

National Standard Employer Identifier (EIN) FAQs

http://aspe.hhs.gov/admnsimp/faqemp.htm

National Provider Identifier (NPI) FAQs

http://aspe.hhs.gov/admnsimp/faqnpi.htm

Security and Electronic Signature Standards FAQs

http://aspe.hhs.gov/admnsimp/faqsec.htm

Electronic Transactions Standards FAQs

http://aspe.hhs.gov/admnsimp/faqtx.htm

Code Sets Standards FAQs

http://aspe.hhs.gov/admnsimp/faqcode.htm

---

Military Health System

http://www.tricare.osd.mil/hipaa/

TRICARE's HIPAA site for the Military Health System.

Federal Register

http://www.access.gpo.gov/su_docs/aces/aces140.html

See the official daily publication for Rules, Proposed rules, and Notices of Federal agencies and organizations, as well as Executive Orders and presidential documents.

Library of Congress

http://www.lcweb.loc.gov

Perform "keyword searches" for HIPAA topics from this comprehensive site that includes the Library of Congress catalog (over 12 million records) and the entire Library of congress web site.

The White House

http://www.whitehouse.gov

Stay current with the latest press releases from the Presidential Administration. Review hot topics, such as HIPAA, as well as general information regarding the activities of the federal government.

National Committee on Vital and Health Statistics

http://www.ncvhs.hhs.gov

Review the input of the "public advisory body to the Secretary o health and Human Services", the public's voice regarding HIPAA. The site offers calendars, proposed rules, implementation timetables, news, meeting minutes, full text regulatory documents and FAQs on HIPAA.

National Infrastructure Protection Center

http://www.nipc.gov/

The NIPC provides timely warnings of international threats, comprehensive analysis and law enforcement investigation and response involving computer and IT and unlawful acts, both physical and cyber, that threaten or target our critical infrastructures. Includes documents such as "Seven Simple Computer Security Tips."

National Institutes of Health

http://www.alw.nih.gov/Security/security-advisories.html

Links to many computer security advisories available online.

http://irm.cit.nih.gov/security/sec_policy.html

Security policies, guidelines, and regulations from NIH's Center for Information Technology.

National Research Council

http://www.nationalacademies.org/subjectindex/com.html

Selected online reports from the National Academies Press, including titles in telecommunications, computer-based patient records, and security issues. The Council's Computer Science and Telecommunications Board conducts assessments on issues such as "Authentication Technologies and Their Privacy Implications."

National Security Agency

http://www.nsa.gov/

A high technology organization, NSA is on the frontiers of communications and data processing. Site includes information on information security (INFOSEC) and security recommendations for Windows and Linux operating systems.

Privacy Working Group

http://www.ntia.doc.gov/policy/privwhitepaper.html

The National Information Infrastructure.

THOMAS

http://thomas.loc.gov

The Library of Congress' web site provides extensive legislative news and information, including recent and past activity relative to HIPAA and health information privacy and security.

States & Territories

Also see HIPAAlinks to Regional Public/Private Groups

HIPAA & the States

http://www.nga.org/center/divisions/1,1188,C_ISSUE_BRIEF^D_4317,00.html

Critical Issues and Compliance Strategies from the National Governors' Association (NGA) Center HIPAA Resources.

"HIPAA: What States Should Know"

http://www.aphsa.org/wmemohipaa.pdf

From the the American Public Human Services Association.

Alabama

http://www.medicaid.state.al.us/HIPAA/

Understanding HIPAA from the State of Alabama Medicaid Agency.

Alaska

http://www.hss.state.ak.us/das/is/hipaa/

The State of Alaska Department of Health and Social Services HIPAA pages include an annotated version of the privacy regulations. Also available: HIPAA Basics, a Microsoft PowerPoint presentation developed by the State of Alaska HSS HIPAA Coordinators Office for HIPAA presentations to general health care audiences.

Arizona

http://www.ahcccs.state.az.us/HIPAA/

State of Arizona's Arizona Health Care Cost Containment System (AHCCCS) HIPAA web site. What you'll find here: the AHCCCS Implementation Plan and Timeline, and current status of their implementation effort; a schedule of Arizona HIPAA Medicaid Consortium (AHMC) upcoming meeting times and locations; links to documents such as Codes and Values, Companion Documents and Local Codes Mapping; and more.

Arkansas

http://www.hipaa.state.ar.us/

Arkansas HIPAA Information site sponsored by the Arkansas Department of Human Services contains extensive FAQs specific to Arkansas.

California

http://www.calohi.ca.gov/

State of California's in-depth Office of HIPAA Implementation (CalOHI) web site. Find out about California and federal legislation and regulations, preemption of California State laws by HIPAA and timelines that apply to HIPAA and related subjects, such as privacy. Contains a report to the California Legislature on the impact of HIPAA on California State departments, as well as FAQs, samples of templates, contracts, forms, sample implementation plans and training plans.

Colorado

http://www.chcpf.state.co.us/HIPAA/hipaaindex.htm

State of Colorado Department of Health Care Policy and Financing's page on HIPAA strongly recommends that all health care providers become familiar with the requirements under HIPAA.

Connecticut

http://www.doit.state.ct.us/hipaa/hipaa.htm

The State of Connecticut Department of Information Technology HIPAA web site lists the State agencies that may be impacted by HIPAA. Includes links to PowerPoint presentations from past Coordinator meetings.

Delaware

(Does not currently have a dedicated HIPAA site.)

District of Columbia

http://dchealth.dc.gov/hipaa/hipaaoverview.shtm

District of Columbia Department of Health HIPAA Overview page.

Florida

http://www.fdhc.state.fl.us/Medicaid/hipaa/index.shtml

Florida State Health & Human Services Agency for Health Care Administration HIPAA pages include resources specific to the state, including a gap analysis, strategic plan, project management chart, covered entities matrix, data element crosswalk, and much more.

Georgia

http://www.communityhealth.state.ga.us/

Georgia Department of Community Health HIPAA Information pages offer guidance on Administrative Simplification, Privacy, and Security.

Guam

(Does not currently have a dedicated HIPAA site.)

Hawaii

http://www.state.hi.us/oip/medical_privacy_task_force.htm#The%20Law

State of Hawaii Office of Information Practices Medical Privacy Task Force's section on Medical Privacy Law.

Idaho

http://www2.state.id.us/dhw/hipaa/

The Idaho Department of Health and Welfare (DHW) HIPAA Project Team's interpretation of the HIPAA legislation.

• http://www2.state.id.us/dhw/hipaa/cc/council_home.htm
  
  The Idaho HIPAA Coordinating Council (IHCC) has been established to meet the immediate need to assess industry-wide HIPAA Administrative Simplification implementation readiness to educate stakeholders and to bring about the statewide coordination necessary for successful compliance.

Illinois

http://www.hfs.illinois.gov/hipaa/

Illinois Department of Healthcare and Family Services' HIPAA informational web pages.

Indiana

http://www.indianamedicaid.com/ihcp/ProviderServices/hipaa.asp

Indiana Health Care Programs' page of HIPAA information.

Iowa

http://www.state.ia.us/government/hipaa/

State of Iowa enterprise HIPAA Compliance Project.

Kansas

(Does not currently have a dedicated HIPAA site.)

Kentucky

http://chs.state.ky.us/dms/HIPAA/

The Department for Medicaid Services provides information regarding HIPAA in relation to Kentucky Medicaid.

Louisiana

http://www.lamedicaid.com/provweb1/Provider_Support/HIPAA_Prep.htm

Louisiana Medicaid page on steps providers should take to prepare for HIPAA

Maine

http://www.state.me.us/bms/hipaainfo.html

The Department of Human Services, Bureau of Medical Services intends, over time, to post additional information on this page pertaining to HIPAA.

Maryland

http://dhmh.state.md.us/HIPAA/

Maryland's Department of Health & Mental Hygiene's HIPAA Internet site, though seemingly targetted for its own department, "has something for everyone, regardless of one's HIPAA exposure to date."

• http://www.mhcc.state.md.us/edi/hipaa/_hipaa.htm
  
  HIPAA information from the Maryland Health Care Commission.

Massachusetts

http://www.state.ma.us/dma/hipaa/hipaa.htm

This page provides information for MassHealth Providers. Division of Medical Assistance manages MassHealth, which pays for health care for certain low- and medium-income people living in Massachusetts.

• http://www.mahealthweb.com/HIPAA.htm
  
  More information about HIPAA on MassHealth's Provider Services Web site.

Michigan

http://www.michigan.gov/mdch/0,1607,7-132--36737--,00.html

HIPAA implementation materials from the Department of Community Health.

Minnesota

http://www.dhs.state.mn.us/hipaa/

Although Minnesota already has existing data privacy and administrative uniformity laws, HIPAA will significantly impact health care business processes here - and throughout the country. The Minnesota Department of Human Services is working to comply with HIPAA and this site shows it.

Mississippi

http://www.hipaa.state.ms.us

The Mississippi Department of Information Technology Services HIPAA web site.

Missouri

http://www.modmh.state.mo.us/homeinfo/hipaa/

The Missouri Department of Mental Health charged the Offices of Information Systems and Quality Management with developing an implementation plan for HIPAA compliance. Staff were deployed to gain information and to identify key facility contacts, constituting our HIPAA Taskforce. In addition, the Department’s HIPAA Core Team, with membership representing the divisions, OIS and OQM, works on assessing DMH readiness and possible impacts of regulatory requirements. Includes a HIPAA 101 presentation.

Montana

http://www.dphhs.state.mt.us/hpsd/medicaid/hipaa/

From the Health Policy and Services Division of the Montana Department of Public Health and Human Services. Includes slide show presentations.

Nevada

http://dhcfp.state.nv.us/HIPAA.htm

From the Department of Human Resources, Division of Health Care Financing and Policy (Nevada Medicaid).

New Hampshire

(Does not currently have a dedicated HIPAA site.)

New Jersey

http://www.njmmis.com

New Jersey Medicaid Program provides a 127-page HIPAA Companion Guide in PDF format.

New Mexico

(Does not currently have a dedicated HIPAA site.)

New York

http://www.oft.state.ny.us/hipaa/

New York State has established a Central HIPAA Coordination Project (CHCP) office at the Office for Technology (OFT) to address HIPAA compliance. The CHCP Team has initiated several activities including: a high-level assessment of agency operations to determine which agencies are programmatically impacted by the HIPAA Administrative Simplification regulations; and a preemption review of State law as required by the privacy regulations. As it continues to make progress, the CHCP Team will post additional information at this site.

• http://www.health.state.ny.us/nysdoh/medicaid/medicaid.htm
  
  The State Department of Health HIPAA Information Center web page is dedicated to providing pertinent information relating to the New York State Medicaid program's efforts to comply with HIPAA.

North Carolina

http://dirm.state.nc.us/hipaa/

The DHHS HIPAA web site features presentations, a compliance model, tools & templates, and more.

North Dakota

http://www.state.nd.us/hipaa/

The ND HIPAA web site includes information and resources for meeting compliance with HIPAA. Also included on this web site is information about the HIPAA compliance efforts of ND state and local government, and of other health care organizations in the region, including the North Dakota HIPAA Coalition (NDHC).

Ohio

http://www.state.oh.us/hipaa/

HIPAAOhio is a statewide HIPAA project composed of state agencies that may be affected by its requirements. Includes a toolkit with presentations.

Oklahoma

http://www.ohca.state.ok.us/Provider/HIPAA/

From the Health Care Authority. Includes pertinent FAQs and HIPAA companion documents that clarify segments as they apply to the Oklahoma Medicaid Management Information System.

Oregon

http://www.hr.state.or.us/hipaa/

The DHS HIPAA Web Site contains two sections. The first section includes general information about HIPAA, as well as decisions the Department of Human Services (DHS) has made and actions it's taking to comply with HIPAA. The second section is the HIPAA Project, where you'll find working documents, including minutes and agendas as well as key documents, such as DHS' communication plan and a document that describes how DHS is approaching its HIPAA work.

Pennsylvania

http://www.dpw.state.pa.us/omap/hipaa/omaphipaa.asp

The DPW Office of Medical Assistance Programs' page contains HIPAA information as it relates to the Pennsylvania Medical Assistance program.

Puerto Rico

http://www.salud.gov.pr/Divisiones/Mensaje%20HIPAA.htm

The Commonwealth of Puerto Rico Department of Health HIPAA page in Spanish. (English translated version.)

Rhode Island

http://www.dhs.state.ri.us/dhs/dhipaa.htm

Department of Human Services HIPAA site with presentations on HIPAA privacy awareness training.

South Carolina

http://www.hipaa.state.sc.us

South Carolina's HIPAA Office site offers information specific to the state.

South Dakota

http://www.state.sd.us/doh/rural/tehipaa.htm

South Dakota Department of Health, Office of Rural Health, Telemedicine Program page on HIPAA.

Tennessee

http://www.state.tn.us/finance/rds/ocr/doc/HIPAA.doc

HIPAA Optional Contract Language related to HIPAA requirements (may be applicable to all types of contracts; revise for grants as appropriate).

Texas

http://www.hhsc.state.tx.us/NDIS/NDISTaskForce.html

From the Health and Human Services Commission. Includes the HIPAA Program Management Office (PMO), which coordinates HIPAA activities and reports on progress for the Health and Human Services agencies, and the National Data Interchange Standards (NDIS) Task Force, which develops a coordinated strategy for state implementation of the national data interchange standards adopted under HIPAA.

US Virgin Islands

(Does not currently have a dedicated HIPAA site.)

Virginia

http://www.dmas.state.va.us/hpa-home.htm

From the Department of Medical Assistance Services. Includes templates that have been reviewed by the Commonwealth of Virginia’s Office of the Attorney General and meet HIPAA Privacy Rule definitions, PowerPoint presentations, and much more.

Washington

http://fortress.wa.gov/dshs/maa/

Washington State HIPAA Partnership page includes a matrix of Washington State privacy laws and HIPAA requirements, as well as links to CHITA, a consortium of health care groups that has taken the lead in organizing HIPAA readiness events in Washington State, a group of seven State agencies sharing their efforts and pooling information about HIPAA, and more.

• http://maa.dshs.wa.gov/dshshipaa/
  
  The Medical Assistance Administration (MAA) HIPAA Project includes assessment tools, data mapping reports, presentation materials, white papers, and more.

West Virginia

http://www.wvdhhr.org/bms/admin/bms_acp_hipaa.htm

From the Bureau for Medical Services. Includes HIPAA 101 presentation, a provider checklist, and the Bureau's ASCA extension request compliance plan confirmation from CMS.

Wisconsin

http://www.dhfs.state.wi.us/HIPAA/

"HIPAA Now!" from the Department of Health & Family Services (DHFS) will provide you with news, options to consider when developing solutions, and Wisconsin DHFS program information specific to HIPAA.

Wyoming

http://wdhfs.state.wy.us/wdh/hippa.htm

Department of Health's page on HIPAA.

Go to TOP