establishes national standards to protect individuals’ medical records and other personal health information and applies to health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically
Source(s):
NISTIR 8053
from
45 C.F.R., 45 C.F.R., Sec. 164.514(e)2