Potential Impact of the HIPAA Privacy Rule on Data Collection in a Registry of Patients With Acute Coronary Syndrome

Abstract
On August 21, 1996, the Health Insurance Portability and Accountability Act (HIPAA) was enacted. After several public comment periods and revisions, the US Department of Health and Human Services issued the Standards for Privacy of Individually Identifiable Health Information (ie, the Privacy Rule) that would be enacted under HIPAA.1 The deadline for compliance with the new privacy rule was set for April 14, 2003. The required changes have substantially affected every health plan, health care provider, and health care clearinghouse in the United States and have involved considerable human and financial resources.