|
Home Page > Executive Branch > Code of Federal Regulations > Electronic Code of Federal Regulations
e-CFR Data is current as of February 4, 2010
TITLE 45--Public Welfare
SUBTITLE A--DEPARTMENT OF HEALTH AND HUMAN SERVICES
SUBCHAPTER C--ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS
PART 164--SECURITY AND PRIVACY
Subpart A--GENERAL PROVISIONS
|
| Organizational requirements. |
|
|
| Relationship to other parts. |
|
Subpart B--[RESERVED]
Subpart C--SECURITY STANDARDS FOR THE PROTECTION OF ELECTRONIC PROTECTED HEALTH INFORMATION
|
| Security standards: General rules. |
|
|
| Administrative safeguards. |
|
|
| Organizational requirements. |
|
|
| Policies and procedures and documentation requirements. |
|
|
| Compliance dates for the initial implementation of the security standards. |
|
Subpart D--NOTIFICATION IN THE CASE OF BREACH OF UNSECURED PROTECTED HEALTH INFORMATION
|
| Notification to individuals. |
|
|
| Notification to the media. |
|
|
| Notification to the Secretary. |
|
|
| Notification by a business associate. |
|
|
| Administrative requirements and burden of proof. |
|
Subpart E--PRIVACY OF INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION
|
| Uses and disclosures of protected health information: general rules. |
|
|
| Uses and disclosures: Organizational requirements. |
|
|
| Uses and disclosures to carry out treatment, payment, or health care operations. |
|
|
| Uses and disclosures for which an authorization is required. |
|
|
| Uses and disclosures requiring an opportunity for the individual to agree or to object. |
|
|
| Uses and disclosures for which an authorization or opportunity to agree or object is not required. |
|
|
| Other requirements relating to uses and disclosures of protected health information. |
|
|
| Notice of privacy practices for protected health information. |
|
|
| Rights to request privacy protection for protected health information. |
|
|
| Access of individuals to protected health information. |
|
|
| Amendment of protected health information. |
|
|
| Accounting of disclosures of protected health information. |
|
|
| Administrative requirements. |
|
|
| Compliance dates for initial implementation of the privacy standards. |
|
|
