The Omnibus Rule, also known as the Final Rule, went into effect on March 26, 2013. It strengthens the privacy and security protection for individuals' health information, including genetic information, that is maintained in electronic health records and other formats. It added additional protection to the HIPAA Privacy and Security Rules. Rather than contain new information, the Omnibus Rule enforces the changes provided by the HITECH Act. The Omnibus Rule:
- Bolsters patients' rights and PHI security
- Enforces business associate liability with direct penalties
- Expands breach notification practices
