Appendix A: HIPAA Timelines

August 21, 1996 President Clinton signed the Health Care Portability and Accountability Act, (HIPAA), into law, [H.R.3103]

December 27, 2001 President Bush signs the Administrative Simplification Compliance Act, (ASCA or H.R.3323) into law. This grants a one time extension for health plans, (except small health plans), and health care providers delaying the implementation of the HIPAA Transaction and Code Set regulations. This extension is only granted if these entities provide compliance plans to the Department of Health and Human Services

October 15, 2002-Last day to file for an extension to the Department of Health and Human Services with your compliance plan for the Transaction and Code set implementation of the regulation

October 16, 2002 Covered entities must begin to implement the Transaction and Code Set unless they filed for an extension

February 20,2003-has two major events:

• Security Standards are finalized and adopted

• The Final Rule adopting changes to the HIPAA Electronic Transactions and Code Set Standards is published This final rule modifies a number of the electronic transactions and code sets adopted as national standards under HIPAA, and eliminates the NDC code set as the standard for all providers except retail pharmacies.

April 14, 2003-HIPAA privacy rule must be implemented by all covered entities

April 16, 2003-Covered entities must begin to implement their compliance plan as outlined in their request for extension.

October 16, 2003-All covered entities must comply with the Transaction and Code Set standard as outlined under the Administration Simplification standard of the law.

July 30, 2004-All covered entities must have an employer identification number as outlined under the Administration Simplification standard of the law.

April 20, 2005-All covered entities must implement the Security standards as outlined under the Administration Simplification standard of the law