Skip to main content
Rural Health Information Hub
Rural Health Information Hub

Rural Health
News by Topic: Patient privacy

Feb 17, 2026 - Notice from the Centers for Medicare & Medicaid Services (CMS) partially modifying an existing system of records maintained by the Office for Civil Rights (OCR) titled "Program Information Management System (PIMS)." The system of records consists of an electronic repository of information and documents about individual members of the public who submit or are named or otherwise involved in civil rights, conscience and religious freedom, and health information privacy-related complaints received by and compliance reviews conducted by OCR and individuals who submit reports to OCR about breaches of unsecured protected health information. OCR uses the system of records to manage documents and information related to OCR's civil rights and health information privacy authorities and activities. Comments are due by March 19, 2026.
Source: Federal Register
Feb 13, 2026 - Notice from the Centers for Medicare & Medicaid Services (CMS) seeking comments on an information collection titled "CMS Electronic Data Interchange (EDI) Enrollment Registration, CMS EDI Enrollment Form, and CMS EDI Enrollment Attestation Form." The forms collect essential information necessary to identify Medicare providers and suppliers during electronic transactions, authorize requested EDI functions, and establish appropriate access privileges for healthcare entities. These forms ensure compliance with HIPAA transaction standards while implementing strengthened security requirements for billing vendors and clearing houses that handle Medicare data. Comments are due by March 16, 2026.
Source: Federal Register
Jan 14, 2026 - Pre-publication notice from the U.S. Department of Health and Human Services (HHS) announcing a virtual tribal consultation on the January 21, 2021, notice of proposed rulemaking (NPRM) titled "Proposed Modifications to the HIPAA Privacy Rule To Support, and Remove Barriers to, Coordinated Care and Individual Engagement." The NPRM intends to strengthen individuals' rights to access their own protected health information, improve care coordination, and reduce administrative burdens on HIPAA covered health care providers and health plans, while continuing to protect individuals' health information privacy interests. The tribal consultation will be held on February 6, 2026, from 2:00 – 3:30 p.m. Eastern. Registration is required.
Source: Federal Register