Home
gpo.gov
govinfo.gov

e-CFR Navigation Aids

Advanced Search

Incorporation By Reference

Related Resources

Electronic Code of Federal Regulations

We invite you to try out our new beta eCFR site at https://ecfr.federalregister.gov. We have made big changes to make the eCFR easier to use. Be sure to leave feedback using the Feedback button on the bottom right of each page!

You are now viewing previous e-CFR data

Now viewing e-CFR data in effect on July 19, 2018

Title 45 → Subtitle A → Subchapter C → Part 164

TITLE 45—Public Welfare

Subtitle A—DEPARTMENT OF HEALTH AND HUMAN SERVICES

SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS

PART 164—SECURITY AND PRIVACY

Subpart A—GENERAL PROVISIONS

Statutory basis.

Definitions.

Applicability.

Organizational requirements.

Relationship to other parts.

Subpart B—[RESERVED]

Subpart C—SECURITY STANDARDS FOR THE PROTECTION OF ELECTRONIC PROTECTED HEALTH INFORMATION

Applicability.

Definitions.

Security standards: General rules.

Administrative safeguards.

Physical safeguards.

Technical safeguards.

Organizational requirements.

Policies and procedures and documentation requirements.

Compliance dates for the initial implementation of the security standards.

Appendix A to Subpart C of Part 164—Security Standards: Matrix

Subpart D—NOTIFICATION IN THE CASE OF BREACH OF UNSECURED PROTECTED HEALTH INFORMATION

Applicability.

Definitions.

Notification to individuals.

Notification to the media.

Notification to the Secretary.

Notification by a business associate.

Law enforcement delay.

Administrative requirements and burden of proof.

Subpart E—PRIVACY OF INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION

Applicability.

Definitions.

Uses and disclosures of protected health information: General rules.

Uses and disclosures: Organizational requirements.

Uses and disclosures to carry out treatment, payment, or health care operations.

Uses and disclosures for which an authorization is required.

Uses and disclosures requiring an opportunity for the individual to agree or to object.

Uses and disclosures for which an authorization or opportunity to agree or object is not required.

Other requirements relating to uses and disclosures of protected health information.

Notice of privacy practices for protected health information.

Rights to request privacy protection for protected health information.

Access of individuals to protected health information.

Amendment of protected health information.

Accounting of disclosures of protected health information.

Administrative requirements.

Transition provisions.

Compliance dates for initial implementation of the privacy standards.

Need assistance?