HIPAA Omnibus Rule
E698614
The HIPAA Omnibus Rule is a 2013 set of regulatory updates that strengthened and expanded HIPAA privacy, security, breach notification, and enforcement provisions, particularly increasing obligations and liability for business associates.
All labels observed (1)
| Label | Occurrences |
|---|---|
| HIPAA Omnibus Rule canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T7847233 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: HIPAA Omnibus Rule Context triple: [HIPAA Enforcement Rule, relatedTo, HIPAA Omnibus Rule]
-
A.
HIPAA Breach Notification Rule
The HIPAA Breach Notification Rule is a U.S. federal regulation that requires covered entities and their business associates to notify affected individuals, regulators, and sometimes the media when unsecured protected health information is compromised.
-
B.
HIPAA Enforcement Rule
The HIPAA Enforcement Rule is a federal regulation that establishes the procedures and penalties for investigating, determining, and enforcing violations of the HIPAA privacy and security requirements.
-
C.
HIPAA Security Rule
The HIPAA Security Rule is a U.S. federal regulation that sets national standards for protecting the confidentiality, integrity, and availability of electronic protected health information through administrative, physical, and technical safeguards.
-
D.
HITECH Act
The HITECH Act is a U.S. law that promotes the adoption and meaningful use of electronic health records while strengthening health information privacy and security protections.
-
E.
Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. federal law that sets national standards for protecting sensitive patient health information and improving the portability and continuity of health insurance coverage.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: HIPAA Omnibus Rule Target entity description: The HIPAA Omnibus Rule is a 2013 set of regulatory updates that strengthened and expanded HIPAA privacy, security, breach notification, and enforcement provisions, particularly increasing obligations and liability for business associates.
-
A.
HIPAA Breach Notification Rule
The HIPAA Breach Notification Rule is a U.S. federal regulation that requires covered entities and their business associates to notify affected individuals, regulators, and sometimes the media when unsecured protected health information is compromised.
-
B.
HIPAA Enforcement Rule
The HIPAA Enforcement Rule is a federal regulation that establishes the procedures and penalties for investigating, determining, and enforcing violations of the HIPAA privacy and security requirements.
-
C.
HIPAA Security Rule
The HIPAA Security Rule is a U.S. federal regulation that sets national standards for protecting the confidentiality, integrity, and availability of electronic protected health information through administrative, physical, and technical safeguards.
-
D.
HITECH Act
The HITECH Act is a U.S. law that promotes the adoption and meaningful use of electronic health records while strengthening health information privacy and security protections.
-
E.
Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. federal law that sets national standards for protecting sensitive patient health information and improving the portability and continuity of health insurance coverage.
- F. None of above. chosen
Statements (50)
| Predicate | Object |
|---|---|
| instanceOf |
HIPAA regulation
ⓘ
United States federal regulation ⓘ |
| addresses |
sale of protected health information
ⓘ
use and disclosure of PHI for fundraising ⓘ use and disclosure of PHI for marketing ⓘ |
| alsoKnownAs |
HIPAA Final Omnibus Rule
NERFINISHED
ⓘ
Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and GINA NERFINISHED ⓘ |
| appliesTo |
business associate subcontractors
ⓘ
health care clearinghouses ⓘ health care providers ⓘ health plans ⓘ |
| appliesToJurisdiction |
United States of America
ⓘ
surface form:
United States
|
| basedOn | Health Information Technology for Economic and Clinical Health Act NERFINISHED ⓘ |
| changes | definition of breach ⓘ |
| citation | 78 FR 5566 ⓘ |
| complianceDate | 2013-09-23 ⓘ |
| country |
United States of America
ⓘ
surface form:
United States
|
| effectiveDate | 2013-03-26 ⓘ |
| enhances |
individual rights to access PHI
ⓘ
individual rights to restrict disclosures to health plans ⓘ |
| establishes | presumption of breach unless low probability of compromise ⓘ |
| expandsLiabilityTo |
business associates
ⓘ
subcontractors of business associates ⓘ |
| hasComponent |
breach notification rule modifications
ⓘ
enforcement rule modifications ⓘ privacy rule modifications ⓘ security rule modifications ⓘ |
| implements | HITECH Act provisions ⓘ |
| increases | civil monetary penalties for HIPAA violations ⓘ |
| issuedBy |
HHS Office for Civil Rights
NERFINISHED
ⓘ
U.S. Department of Health and Human Services NERFINISHED ⓘ |
| legalBasis | HITECH Act Section 13400 et seq. NERFINISHED ⓘ |
| objective |
enhance breach notification requirements
ⓘ
improve security of electronic health information ⓘ increase HIPAA enforcement ⓘ strengthen privacy protections for health information ⓘ |
| partOf | Health Insurance Portability and Accountability Act regulatory framework NERFINISHED ⓘ |
| publicationDate | 2013-01-25 ⓘ |
| regulates |
business associates
ⓘ
covered entities ⓘ electronic protected health information ⓘ protected health information ⓘ |
| requires |
notice of privacy practices updates
ⓘ
risk assessment for breach determination ⓘ updated business associate agreements ⓘ |
| strengthens |
HIPAA Breach Notification Rule
NERFINISHED
ⓘ
HIPAA Enforcement Rule NERFINISHED ⓘ HIPAA Privacy Rule NERFINISHED ⓘ HIPAA Security Rule NERFINISHED ⓘ |
| yearEnacted | 2013 ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: HIPAA Omnibus Rule Description of subject: The HIPAA Omnibus Rule is a 2013 set of regulatory updates that strengthened and expanded HIPAA privacy, security, breach notification, and enforcement provisions, particularly increasing obligations and liability for business associates.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.