HI SB2849

Authorizes the Department of Health to establish permanent or temporary Privacy Officer and Security Officer positions to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA).

The Privacy Officer will be responsible for developing and implementing privacy-related policies and procedures as required by federal regulations (45 CFR §164.530(a)(1)).

The Security Officer will coordinate information security compliance as required by federal regulations (45 CFR §164.308(a)(2)).

Both positions shall be appointed by the director without regard to Hawaii's civil service requirements under chapter 76.

Takes effect upon approval.