Subchapter III: PRIVACY
Part A: Improved Privacy Provisions and Security Provisions
- Section 17931: Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions
- Section 17932: Notification in the case of breach
- Section 17933: Education on health information privacy
- Section 17934: Application of privacy provisions and penalties to business associates of covered entities
- Section 17935: Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format
- Section 17936: Conditions on certain contacts as part of health care operations
- Section 17937: Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities
- Section 17938: Business associate contracts required for certain entities
- Section 17939: Improved enforcement
- Section 17940: Audits