§ 164.302 Applicability
A covered entity or business associate must comply with the applicable standards, implementation specifications…
Read MoreSubpart C – Security Standards
§ 164.304 Definitions
As used in this subpart, the following terms have the following meanings: Access means the ability or the means necessary to read, write, modify, or communicate data/information or otherwise…
Read More§ 164.306 Security standards: General rules
(a) General requirements. Covered entities and business associates
must do the following: (1) Ensure the confidentiality, integrity, and availability of all electronic protected health information…
§ 164.308 Administrative safeguards
(a) A covered entity or business associate must, in accordance with §164.306: (1) (i) Standard: Security management process. Implement policies and procedures to prevent…
Read More§ 164.310 Physical safeguards
A covered entity or business associate must, in accordance with §164.306: (a) (1) Standard: Facility access controls. Implement policies and procedures to limit physical access to its…
Read More