48 CFR § 324.7000 - 324.7000 Scope of subpart.
---
identifier: "/us/cfr/t48/s324.7000"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "48 CFR § 324.7000 - 324.7000 Scope of subpart."
title_number: 48
title_name: "Federal Acquisition Regulations System"
section_number: "324.7000"
section_name: "324.7000 Scope of subpart."
chapter_number: 3
chapter_name: "HEALTH AND HUMAN SERVICES"
subchapter_number: "D"
subchapter_name: "SOCIOECONOMIC PROGRAMS"
part_number: "324"
part_name: "PROTECTION OF PRIVACY AND FREEDOM OF INFORMATION"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "5 U.S.C. 301; 40 U.S.C. 121(c)(2)."
regulatory_source: "80 FR 72151, Nov. 18, 2015, unless otherwise noted."
cfr_part: "324"
---
# 324.7000 324.7000 Scope of subpart.
All individually identifiable health information that is Protected Health Information (PHI), as defined in 45 CFR 160.103 shall be administered in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) implementing regulations at 45 CFR parts 160 and 164 (the HIPAA Privacy, Security, and Breach Notification Rules). The term “HIPAA” is used in this part to refer to title II, subtitle F of the HIPAA statute, at part C of title XI of the Social Security Act, 42 U.S.C. 1320d *et seq.,* section 264 of HIPAA, subtitle D of title XIII of the American Recovery and Reinvestment Act of 2009, and regulations under such provisions.