Give several examples of how the Health Information Technology for Economic and Clinical Health Act (HITECH) strengthened privacy and security.

What will be an ideal response?

HITECH extended compliance with HIPAA privacy and security to business associates and their sub-contractors, prohibited the sale of protected health information without appropriate authorization, expanded individual rights to electronically access one's PHI, and prohibited the use of genetic information for insurance underwriting purposes. In addition, HITECH finalized the breach notification requirements, expanded individuals' rights to obtain restrictions on certain PHI if services are paid for out of pocket, and established new limitations on the use and disclosure of protected health information for marketing and fund-raising purposes. Finally, HITECH made it easier for schools to access immunization records and removed restrictions of the privacy rule if an individual had been deceased for more than 50 years.