45 CFR §164.302
Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
A covered entity or business associate must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information of a covered entity.