Compliance Timeline

As of June 1, 2002, the following compliance dates have been established for several portions of the regulations and targeted publication dates for the other parts of the regulation have been provided:

Transaction and Code Set Standards – Final ruling published on 8/17/00 and covered entities (health plans, providers and clearinghouses) required to comply by 10/16/02.  Provisions for a one-year extension have been developed and required extension form have been shared by CMS allowing for extension by 10/16/03. QO has filed an extension.

Privacy Standards – Final ruling published on 12/28/00 and covered entities required to comply by 4/14/03.

Security Standards – Final rules were sent to the Office of Management and Budget on January 13, 2003. The proposal  is expected to receive final clearance this Spring.  Once the final rule is cleared, it will be published. The compliance deadline will likely fall on a date two years following publication of the final rule.

Unique Identifiers – Final rule for Employer Identifier published on 5/30/02 and requires compliance by 7/31/04.  Final rules for Provider and health plan Identifiers were due from Department of Health and Human Services by 8/30/02.  Expected compliance date for Provider and health plan Identifiers estimated as 10/30/04.