Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules (Final rule, 78 FR 5566)

Publisher

U.S. Department of Health and Human Services via Office of the Federal Register / GovInfo

URL

https://www.govinfo.gov/content/pkg/FR-2013-01-25/html/2013-01073.htm

Published

2013-01-25

Updated

unknown

Accessed

2026-10-01

HTTP status

200

License

US government work; public domain; public domain; short excerpts and locators only by corpus convention

Source notes citing this source

• A UCaaS or CCaaS provider that stores call recordings voicemail transcripts or chat history containing PHI for a covered entity is unlikely to qualify for the conduit exception and should be treated as a business associate needing a BAA. inferred in context
• HHS stated in the 2013 Omnibus Rule preamble that the conduit exception is limited to transmission services including any temporary storage of transmitted data incident to that transmission. in context
• HHS stated that a data storage company with access to PHI is a business associate even if it does not view the information or views it only randomly or infrequently. in context

Cite this source record

APA

WarmTransfer. (2013, January 25). Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules (Final rule, 78 FR 5566). WarmTransfer. https://warmtransfer.net/knowledge/sources/govinfo-fr-2013-01073-hipaa-omnibus-rule

BibTeX

@misc{warmtransfer-govinfo-fr-2013-01073-hipaa-omnibus-rule,
  title  = {Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules (Final rule, 78 FR 5566)},
  author = {{WarmTransfer}},
  year   = {2013},
  url    = {https://warmtransfer.net/knowledge/sources/govinfo-fr-2013-01073-hipaa-omnibus-rule},
  note   = {U.S. Department of Health and Human Services via Office of the Federal Register / GovInfo, accessed 2026-10-01}
}