Final HIPAA privacy rules: "How do we get started?"

This article provides a general overview of the HIPAA privacy standards established by the Final Rules. It also discusses organizational approaches health care providers, more specifically hospitals and health systems, can use to "get started" with their HIPAA compliance effort. It also explores the corresponding human and financial resources that such providers will need to develop and implement the program. While the needs and approaches identified and discussed in this article may also apply to some extent to Covered Entities other than health care providers, this article does not specifically address those considerations in the context of health plans (including employer-sponsored plans), health care clearinghouses, or retail pharmacies.