Industries & Practices
Health Care Law
Index to Section-by-Section Documentation of the HIPAA Regulations
Included here is a section-by-section compilation of the documentation for the HIPAA privacy and security regulations as it appeared in the Federal Register, including the actual regulation, the HHS description and the HHS response to comments received regarding that particular section of the regulations.
Please note: this is premium content. Learn more and subscribe here.
The regulations included in the section-by-section compilation include:
- January 6, 2016: HIPAA Privacy rule and the National Instant Criminal Background Check System (NCIS) Final Rule
- February 2014: CLIA and Patients' Access to Test Reports
- January 2013: Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules
- August 2009: Breach Notification for Unsecured Protected Health Information Regulations
- February 2003: Security Regulations
- August 2002: Complete Text of the Original HIPAA Privacy Regulations
A Listing of and Links to the Guidance Documents on HIPAA Privacy From HHS
The Section-by-Section Compilation
Introductory Material
Part 160 General Administrative Requirements
|
Imposition of Civil Money Penalties Not included in the section-by-section. The text is available here. The January 2013 HIPAA rules include some revisions to this subpart.
|
|
Procedures For Hearing Not included in the section-by-section. The text is available here. The January 2013 HIPAA rules include some revisions to this subpart.
|
Part 164 Security and Privacy
Privacy of Individually Identifiable Health Information
Subpart E
|
Applicability - Section 164.500
|
|
Uses and Disclosures - Organizational Requirements - Component Entities, Affiliated Entities, Business Associates and Group Health Plans Definitions - (a)
Subparagraphs (b)-(d) -- Repealed Business Associate Contracts - (e) Requirements for Group Health Plans - (f) Requirements for a Covered Entity With Multiple Covered Functions - (g)
|
|
Uses and Disclosures to Carry Out Treatment, Payment or Health Care Operations Permitted Uses and Disclosures - (a)
Consent for Uses and Disclosures Permitted - (b) Treatment, Payment, or Health Care Operations - (c)
|
|
Uses and Disclosures For Which an Authorization is Required Authorizations for Uses and Disclosures - (a)
General Requirements - (b) Core Elements and Requirements - (c)
|
|
Uses and Disclosures Requiring an Opportunity for the Individual to Agree or to Object General Rule
Use and Disclosure for Facility Directories - (a) Uses and Disclosures for Involvement in the Individual's Care and Notification Purposes - (b)
|
|
Other Requirements Relating to Uses and Disclosures of Protected Health Information |
|
Notice of Privacy Practices for Protected Health Information Right to Notice of Privacy Practices - (a)
Content of Notice of Privacy Practices - (b) Provision of Notice of Privacy Practices - (c) Joint Notice by Separate Covered Entities - (d) Documentation of Notice - (e)
|
|
Rights to Request Privacy Protection for Protected Health Information Right of an Individual to Request Restriction of Uses and Disclosures - (a)
Confidential Communications Requirements - (b)
|
|
Access of Individuals to Protected Health Information Access to Protected Health Information - (a)
Requests for Access and Timely Action - (b) Provision of Access - (c) Denial of Access - (d) Documentation - (e)
|
|
Amendment of Protected Health Information Right to Amend - (a)
Requests for Amendment and Timely Action - (b) Accepting the Amendment - (c) Denying the Amendment - (d) Actions on Notices of Amendment - (e) Documentation - (f)
|
|
Accounting of Disclosures of Protected Health Information Right to an Accounting - (a)
Content of the Accounting - (b) Provision of the Accounting - (c) Documentation - (d)
|
|
Compliance Dates - Section 164.534
|