General Provisions
Subpart A

Statutory Basis and Purpose - Section 160.101
Applicability - Section 160.102
Definitions - Section 160.103

Act
ANSI
Business Associate
Compliance Date
Covered Entity
Disclosure
Electronic Media
Electronic Protected Health Information
Group Health Plan
HCFA
HHS
Health Care
Health Care Clearinghouse
Health Care Provider
Health Information
Health Insurance Issuer
Health Maintenance Organization
Health Plan
Implementation Specification
Individual
Individually Identifiable Health Information
Modification
Organized Health Care Arrangement
Protected Health Information
Secretary
Small Health Plan
Standard
Standard Setting Organization
State
Trading Partner Agreement
Transaction
Use
Workforce

Modifications - Section 160.104

Applicability - Section 164.500

Uses and Disclosures - Organizational Requirements - Component Entities, Affiliated Entities, Business Associates and Group Health Plans
Section 164.504

Definitions - (a)
[164.504(b) - (d) Removed and reserved]
Business Associate Contracts - (e)
Requirements for Group Health Plans - (f)
Requirements for a Covered Entity With Multiple Covered Functions - (g)

Uses and Disclosures to Carry Out Treatment, Payment or Health Care Operations
Section 164.506

Permitted Uses and Disclosures - (a)
Consent for Uses and Disclosures Permitted - (b)
Treatment, Payment, or Health Care Operations - (c)

Uses and Disclosures For Which an Authorization is Required
Section 164.508

Authorizations for Uses and Disclosures - (a)
General Requirements - (b)
Core Elements and Requirements - (c)

Uses and Disclosures Requiring an Opportunity for the Individual to Agree or to Object
Section 164.510

General Rule
Use and Disclosure for Facility Directories - (a)
Uses and Disclosures for Involvement in the Individual's Care and Notification Purposes - (b)

Uses and Disclosures For Which Consent, an Authorization, or Opportunity to Agree or Object is Not Required
Section 164.512

General Rule
Uses and Disclosures Required By Law - (a)
Uses and Disclosures for Public Health Activities - (b)
Disclosures About Victims of Abuse, Neglect or Domestic Violence - (c)
Uses and Disclosures for Health Oversight Activities - (d)
Disclosures for Judicial and Administrative Proceedings - (e)
Disclosures for Law Enforcement Purposes - (f)
Uses and Disclosures about Decedents - (g)
Uses and Disclosures for Cadaveric Organ, Eye, Tissue Donation - (h)
Uses and Disclosures for Research Purposes - (i)
Uses and Disclosures to Avert a Serious Threat to Health or Safety - (j)
Uses and Disclosures For Specialized Government Functions - (k)
Disclosures for Workers' Compensation - (l)

Other Requirements Relating to Uses and Disclosures of Protected Health Information
Section 164.514

De-Identification of Protected Health Information - (a)
Requirements for De-Identification of Protected Health Information - (b)
Re-Identification - (c)
Minimum Necessary Requirements - (d)
Limited Data Set - (e)
Fundraising - (f)
Underwriting - (g)
Verification Requirements - (h)

Notice of Privacy Practices for Protected Health Information
Section 164.520

Right to Notice of Privacy Practices - (a)
Content of Notice of Privacy Practices - (b)
Provision of Notice of Privacy Practices - (c)
Joint Notice by Separate Covered Entities - (d)
Documentation of Notice - (e)

Rights to Request Privacy Protection for Protected Health Information
Section 164.522

Right of an Individual to Request Restriction of Uses and Disclosures - (a)
Confidential Communications Requirements - (b)

Access of Individuals to Protected Health Information
Section 164.524

Access to Protected Health Information - (a)
Requests for Access and Timely Action - (b)
Provision of Access - (c)
Denial of Access - (d)
Documentation - (e)

Amendment of Protected Health Information
Section 164.526

Right to Amend - (a)
Requests for Amendment and Timely Action - (b)
Accepting the Amendment - (c)
Denying the Amendment - (d)
Actions on Notices of Amendment - (e)
Documentation - (f)

Accounting of Disclosures of Protected Health Information
Section 164.528

Right to an Accounting - (a)
Content of the Accounting - (b)
Provision of the Accounting - (c)
Documentation - (d)

The Administrative Requirements
Section 164.530

Personnel Designations - (a)
Training - (b)
Safeguards - (c)
Complaints to the Covered Entity - (d)
Sanctions - (e)
Mitigation - (f)
Refraining from Intimidating or Retaliatory Acts -(g)
Waiver of Rights - (h)
Policies and Procedures (i)
Documentation - (j)
Group Health Plans - (k)

Transition Provisions - Section 164.532

Compliance Dates - Section 164.534