But regardless of what the public heard or read repeatedly, only workers (or their dependents) with such conditions are affected by the law. For workers who lose group coverage and need individual policies, the law sets up formidable hurdles. So far, says an aide to Congressman Pete Stark, a California Democrat active in health reform, "Anyone who calls this office falls outside the bill" (Lieberman, 1997, p. 50). Epstein (2002) notes some of the unintended consequences of HIPAA with reference to medical research. He cites the provisions on privacy and finds a conflict "between the concern for privacy on the one hand, and the ability of medical scientists, physicians, and institutions to continue on with their traditional research activities" (Epstein, 2002).

Under the new rules, it is assumed that everyone needs to obtain consent for the disclosure or use of any particular medical record for any kind of purpose, and when HIPAA does distinguish among purposes, it does so based on the needs of the individual. In terms of medical research, there are no direct patient benefits involved but only more general benefits for everyone, so the regulations impose tougher requirements on disclosure. This can make the process more difficult and even impossible in some situations.

A major issue with HIPAA has been compliance and with meeting the deadlines for compliance by protecting patient records and assuring that needed information was preserved in the proper manner. Another issue has been preventing fraud, with rules on accountability...

151). Covered entities have to disclose more information to the patients concerning how they may use personal medical information and their rights under the new privacy regulation. Patients are normally asked to sign, initial, or otherwise acknowledge that they received this notice. The law has a privacy rule that sets limits on how health plans and covered providers may use individually identifiable health information.
Some find that HIPAA may be too complex and include too many related provisions to be as effective as it needs to be. The main issue in the law is portability, but the many other provisions show how even that one particular change requires a good deal of change in other areas as well.

References

DiSimone, R.L. (1997). Health Insurance Reform Legislation. Social Security Bulletin 60(4), 18.

Epstein, R.A. (2002). HIPAA on Privacy: Its Unintended and Intended Consequences. The Cato Journal, Volume 22, Issue 1, 13-15.

Hyman, D.A. (2002). HIPAA and Health Care Fraud: An Empirical Perspective. The Cato Journal, Volume 22, Issue 1, 151-160.

Lieberman, T. (1997, July-August). You Can't Take it with You.…