Title 42, Chapter 156 — Health Information Technology

Coordination of Federal activities with adopted standards and implementation specifications

Application to private entities

Study and reports

National Institute for Standards and Technology testing

Research and development programs

Definitions

Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions

Notification in the case of breach

Education on health information privacy

Application of privacy provisions and penalties to business associates of covered entities

Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format

Conditions on certain contacts as part of health care operations

Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities

Business associate contracts required for certain entities

Improved enforcement

Audits

Recognition of security practices

Relationship to other laws

Regulatory references

Studies, reports, guidance