The Omnibus Rule bolstered patients' rights through the following modifications:
- The sale of PHI without patient authorization is prohibited.
- Patients' rights to receive electronic copies of their health information are expanded.
- Disclosures are restricted to a health plan concerning treatment when the patient has paid for the treatment entirely out-of-pocket.
- Redistribution of a covered entity’s Notice of Privacy Practices (NPP) are required if changes are made.
- Patient authorization is modified to:
- Facilitate research and disclosure of child immunization proof to schools
- Enable access to decedent information by family members or others
