"To ensure compliance, providers, other covered entities, and business associates need to do the following before December 23, 2024: [1] Review and modify your HIPAA policies and procedures and train employees concerning the Rule. [2] Review and consider modifying authorizations or request for information forms to ask if the person is seeking RPHI. If no RPHI is sought, then the Rule does not apply.... [3] Draft and use a compliant attestation or adopt and use the OCR model attestation when the provider or business associate receives requests for RPHI."  MORE >>