As they prepare to meet the Sept. 23 compliance deadline for the HIPAA Omnibus Rule, security leaders at healthcare organizations are finding one requirement particularly challenging.
The rule requires organizations to accommodate patients' requests to not disclose to their health insurer information about a product or service that they paid for out of their own pockets.
