Improved Privacy Provisions and Security Provisions
17931Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions17932Notification in the case of breach17933Education on health information privacy17934Application of privacy provisions and penalties to business associates of covered entities17935Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format17936Conditions on certain contacts as part of health care operations17937Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities17938Business associate contracts required for certain entities17939Improved enforcement17940Audits17941Recognition of security practices