On January 25, 2013, the US Department of Health and Human Services (HHS) Office of Civil Rights (OCR) issued its long-awaited Health Insurance Portability and Accountability Act of 1996 (HIPAA) final omnibus regulations (Final Rule). The Final Rule modified the HIPAA Privacy, Security, Enforcement and Breach Notification Rules (HIPAA Rules) and is comprised of four sub-rules: Final modifications to the HIPAA Privacy, Security, and Enforcement Rules mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act; A final rule adopting changes to the HIPAA Enforcement Rule to incorporate the increased and tiered civil money penalty structure as set forth by HITECH; A final Breach Notification rule; and A final rule modifying the Privacy Rule as required by the Genetic Information Nondiscrimination Act (GINA). While the Final Rule is effective March 26, 2013, compliance with the provisions of the Final Rule is not required until September 23, 2013....