CyberTRIZPEDIA

Health Insurance Portability and Accountability Act

U.S. framework protecting privacy and security of protected health information.

Jurisdiction
US
Issuer
U.S. Department of Health and Human Services
Effective
2003-04-14

Sectors

Healthcare & PharmaInsuranceIT & CybersecurityProfessional ServicesTechnology

Articles (41)

Statutory basis.Definitions.Applicability.Organizational requirements.Relationship to other parts.Applicability.Definitions.Security standards: General rules.Administrative safeguards.Physical safeguards.Technical safeguards.Organizational requirements.Policies and procedures and documentation requirements.Compliance dates for the initial implementation of the security standards.Applicability.Definitions.Notification to individuals.Notification to the media.Notification to the Secretary.Notification by a business associate.Law enforcement delay.Administrative requirements and burden of proof.Applicability.Definitions.Uses and disclosures of protected health information: General rules.Uses and disclosures: Organizational requirements.Uses and disclosures to carry out treatment, payment, or health care operations.Uses and disclosures for which an authorization is required.Uses and disclosures for which an attestation is required.Uses and disclosures requiring an opportunity for the individual to agree or to object.Uses and disclosures for which an authorization or opportunity to agree or object is not required.Other requirements relating to uses and disclosures of protected health information.Notice of privacy practices for protected health information.Rights to request privacy protection for protected health information.Access of individuals to protected health information.Amendment of protected health information.Accounting of disclosures of protected health information.Administrative requirements.Transition provisions.Compliance dates for initial implementation of the privacy standards.Severability.