The Department of Health and Human Services (HHS) is the official source for all things HIPAA, and, conveniently, they have some great information about the HIPAA Administrative Simplification Rules, which provides not only high-level information about each of the rules, but also links to the statutes and all current updates -- including the changes as a result of HITECH passing in February 2009.
Additionally, SearchSecurity.com has produced several great resources as well. In particular, check out their HIPAA training, audit and requirement checklist. In the full list of HIPAA resources you'll find all sorts of useful information, including more articles by yours truly, as well as some potentially useful tidbits like this article on the FTC's decision to extend HIPAA breach notification to Web-based health repositories.
Finally, HIPAA.org has some great information and resources as well.
For more information:
This was first published in September 2009