The American Recovery and Reinvestment Act of 2009
Privacy Provisions: Guidance and Rule Making
CHRONOLOGICAL LISTING OF KEY DATES
February 17, 2009: Enactment of ARRA/HITECH 2009
Application of new tiered civil penalties based on the nature of HIPAA violations, up to $50,000 per violation and an annual maximum of $1.5 million (Section 13410)
Enforcement by State Attorney Generals for offenses occurring post enactment
