The Omnibus Rule bolstered patients' rights through the following modifications:
- The sale of PHI without patient authorization is prohibited.
- Patients' rights to receive electronic copies of their health information are expanded.
- Disclosures are restricted to a health plan concerning treatment when the patient has paid entirely out-of-pocket.
- If changes are made, a covered entity’s Notice of Privacy Practices (NPP) must be redistributed.
- Patient authorization is modified to:
- Facilitate research and disclosure of child immunization proof to schools
- Enable access to decedent information by family members or others
