Applicability of HITECH and HIPAA Privacy Rule and Security Rule Provisions. As provided by federal law, Title XIII of the American Recovery and Reinvestment Act of 2009 (ARRA), also known as the Health Information Technology Economic and Clinical Health (HITECH) Act, requires a Business Associate (Vendor) that contracts with the Agency, a HIPAA covered entity, to comply with the provisions of the HIPAA Privacy and Security Rules (45 C.F.R. 160 and 164).
