HITECH Act: New Law Requires Significant Investment in Health Information Privacy and Security: NACUANOTES July 17, 2009 by Barbara Bennett and Alexander Dreier, Hogan and Hartson

Joint Guidance on the Application of the Family Educational Rights and Privacy Act (FERPA) and the Health Insurance Portability and Accountability Act (HIPAA) to Student Health Records Issued November 2008.  The guidance addresses the interplay between FERPA and the HIPAA Privacy Rule at elementary and secondary levels, as well as at the postsecondary level and addresses many of the questions raised by school officials, health care professionals, and others regarding the applicability of these two laws to records maintained on students.  It also addresses certain disclosures that are allowed without consent or authorization under both laws, especially those related to health and safety emergency situations.

HIPAA Security Rule: NACUANOTES June 13, 2007

HR's role in HIPAA Security Compliance by Philip L. Gordon, Littler Mendelson

This is an excellent summary of the steps Human Resources departments need to take to work with IT professionals to ensure that PHI stored or transmitted electronically is protected. (March 2005)

Private Sector Entities Routinely Obtain and Use SSNs, and Laws Limit the Disclosure of This Information:

This thirty page report focuses on how information resellers, CRAs and some health care organizations obtain and use SSNs and discusses the laws and practices relevant to safeguarding SSNs and consumer's privacy. The report covers HIPAA, Gramm Leach Bliley, The Fair Credit Reporting Act, the Drivers Privacy Protection Act

Jumping the Hurdles of the HIPAA Privacy Rule: A July 2003 article from Jackson Lewis with an overview on HIPAA and tips on obtaining PHI in litigation.

HIPAA Privacy Primer for the College or University Administrator: White Paper prepared by Gerald Woods, Kilpatrick Stockton, L.L.P.,  for the American Council on Education,  December, 2002.