45 CFR Part 164 — Security and Privacy
Subpart A — General Provisions
Subpart C — Security Standards for the Protection of Electronic Protected Health Information
- § 164.302— Applicability.
- § 164.304— Definitions.
- § 164.306— Security standards: General rules.
- § 164.308— Administrative safeguards.
- § 164.310— Physical safeguards.
- § 164.312— Technical safeguards.
- § 164.314— Organizational requirements.
- § 164.316— Policies and procedures and documentation requirements.
- § 164.318— Compliance dates for the initial implementation of the security standards.
Subpart D — Notification in the Case of Breach of Unsecured Protected Health Information
- § 164.400— Applicability.
- § 164.402— Definitions.
- § 164.404— Notification to individuals.
- § 164.406— Notification to the media.
- § 164.408— Notification to the Secretary.
- § 164.410— Notification by a business associate.
- § 164.412— Law enforcement delay.
- § 164.414— Administrative requirements and burden of proof.
Subpart E — Privacy of Individually Identifiable Health Information
- § 164.500— Applicability.
- § 164.501— Definitions.
- § 164.502— Uses and disclosures of protected health information: General rules.
- § 164.504— Uses and disclosures: Organizational requirements.
- § 164.506— Uses and disclosures to carry out treatment, payment, or health care operations.
- § 164.508— Uses and disclosures for which an authorization is required.
- § 164.509— Uses and disclosures for which an attestation is required.
- § 164.510— Uses and disclosures requiring an opportunity for the individual to agree or to object.
- § 164.512— Uses and disclosures for which an authorization or opportunity to agree or object is not required.
- § 164.514— Other requirements relating to uses and disclosures of protected health information.
- § 164.520— Notice of privacy practices for protected health information.
- § 164.522— Rights to request privacy protection for protected health information.
- § 164.524— Access of individuals to protected health information.
- § 164.526— Amendment of protected health information.
- § 164.528— Accounting of disclosures of protected health information.
- § 164.530— Administrative requirements.
- § 164.532— Transition provisions.
- § 164.534— Compliance dates for initial implementation of the privacy standards.
- § 164.535— Severability.