{'fraction_non_alphanumeric': 0.027958993476234855, 'fraction_numerical': 0.03168685927306617, 'mean_word_length': 4.966666666666667, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
The HIPAA Final Rule: What's Changed?

Abstract The March/April issue of ISSincluded an article entitled “HIPAA Security Rule 101: The Time to Act Is Now,” which, in retrospect, was a very “reasonable and appropriate” title for that article. While the Department of Health and Human Services had indicated that the rule would be published by December 27, 2002, that date passed, the rule was progressing through the Administrative Simplification Rule-Making Process. The final rule was submitted to the Office of Management and Budget (OMB) in early 2003 and was published in the Federal Register as 45 CFR Parts 160, 162, and 164 on February 20, 2003. Because many of the primary security ideas of the 1998 proposed Security Rule remain, this article should be used in conjunction with the previous article to provide the total Health Insurance Portability and Accountability Act (HIPAA) Security Final Rule picture. This article provides brief descriptions of the key provisions of the rule, along with an explanation of some of the changes and the rationale behind them.