42 U.S.C., Title 42, Chapter 156, Subchapter III, Part A | uscode.io

Part A: Improved Privacy Provisions and Security Provisions

Section 17931: Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions

Section 17932: Notification in the case of breach

Section 17933: Education on health information privacy

Section 17934: Application of privacy provisions and penalties to business associates of covered entities

Section 17935: Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format

Section 17936: Conditions on certain contacts as part of health care operations

Section 17937: Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities

Section 17938: Business associate contracts required for certain entities

Section 17939: Improved enforcement

Section 17940: Audits