C.F.R. » Title 45 » SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS › PART 164—SECURITY AND PRIVACY › Subpart C—Security Standards for the Protection of Electronic Protected Health Information

45 C.F.R. § 164.302

Applicability

Read at: eCFRecfr.gov CornellLII GovInfogovinfo.gov CasesGoogle Scholar

A covered entity or business associate must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information of a covered entity.

[78 FR 5693, Jan. 25, 2013]
Notes of Decisions
Cited in 2 cases (2 in the last 5 years), 2025–2025 · leading case: Kepler v. NaphCare Inc. (D. Ariz. 2025).
Sort: Relevance Newest Treatment
Kepler v. NaphCare Inc. (D. Ariz. 2025). “69 at 15 (citing 45 C.F.R. § 164.302 ).) 1 Casey’s mistreatment was caused in-part by NaphCare Defendants’ failure to properly 2 review her complete medical records including her prescription medication history.”
Meherg v. Rush Univ. Med. Ctr., 2025 IL App (1st) 231102-U (Ill. App. Ct. 2025). “See 45 C.F.R. §§ 164.302 to 164.318. The Security Rule requires entities maintaining covered records to put certain technical safeguards in place, including audit controls: “hardware, software, and/or procedural mechanisms that record and examine activity in information systems…”
Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.