§ 164.312 Technical safeguards
A covered entity or business associate must, in accordance with §164.306: (a) (1) Standard: Access control. Implement technical policies and procedures for electronic information systems that…
Read MoreSubpart C – Security Standards
§ 164.314 Organizational requirements
(a)
(1) Standard: Business associate contracts or other arrangements. (i) The contract or other arrangement between the covered entity and its business associate required by §164.308(b)(4) must meet the requirements of…
Read More§ 164.316 Policies and procedures and documentation requirements
A covered entity or business associate must, in accordance with §164.306: (a) Standard: Policies and procedures. Implement reasonable and appropriate policies and procedures to comply with the standards, implementation specifications…
Read More§ 164.318 Compliance dates for the initial implementation of the security standards
(a) Health plan. (1) A health plan that is not a small health plan must comply with the applicable requirements of this subpart no later than April 20, 2005. (2) A small health plan must comply with…
Read More