In March 2009 AHIMA published an analysis of the ARRA provisions that specifically addressing the privacy of healthcare data. You can find this analysis at
http://www.ahima.org/dc/documents/AnalysisofARRAPrivacy-fin-3-2009a.pdf
All of the aspects of ARRA are discussed in AHIMA’s analysis which can be found at
http://www.ahima.org/dc