Authority of HHS. HHS enforces the Federal Standards for Privacy of Individually Identifiable Health Information (45 C.F.R. Part 160 and Subparts A and E of Part 164, the “Privacy Rule”) and the Federal Security Standards for the Protection of Electronic Protected Health Information (45 C.F.R. Part 160 and Subparts A and C of Part 164, the “Security Rule”). HHS has the authority to conduct investigations of complaints alleging violations of the Privacy and Security Rules by covered entities, and a covered entity must cooperate with HHS’s investigation. 45 C.F.R. §§160.306(c) and 160.310(b).
Authority of HHS. HHS enforces the Federal standards that govern the Privacy of Individually Identifiable Health Information (the Privacy Rule), the Security Standards for the Protection of Electronic Protected Health Information (the Security Rule), and the Notification in the Case of Breach of Unsecured Protected Health Information (the Breach Notification Rule) (45 C.F.R. Part 160 and Part 164, subparts A, C, D, and E, the HIPAA Rules). HHS has authority to conduct investigations of complaints alleging violations of the HIPAA Rules by covered entities, and a covered entity must cooperate with HHS’s investigation. 45 C.F.R. §§ 160.306(c) and 160.310(b). Parkview is a covered entity as defined in 45 C.F.R. § 160.103. Thus, Parkview is required to comply with the HIPAA Rules. Parkview is an affiliated covered entity pursuant to 45 C.F.R. § 164.105(b).
Authority of HHS. HHS enforces the Federal standards that govern the privacy of individually identifiable health information (45 C.F.R. Part 160 and Subparts A and E of Part 164, the “Privacy Rule”), the Federal standards that govern the security of electronic individually identifiable health information (45 C.F.R. Part 160 and Subparts A and C of Part 164, the “Security Rule”), and the Federal standards that govern notification in the case of breach of unsecured protected health information (45 C.F.R. Part 160 and Subparts A and D of Part 164, the “Breach Notification Rule.”) HHS has the authority to conduct the investigations of complaints alleging violations of the Privacy, Security, and Breach Notification Rules by covered entities, and covered entities must cooperate with HHS’ investigation. 45 C.F.R. § 160.306(c) and §160.310(b).
Authority of HHS. HHS enforces the Federal standards that govern the privacy of protected health information (45 C.F.R. Part 160 and Subparts A and E of Part 164, the “Privacy Rule”), the security of electronic protected health information (45 C.F.R. Part 160 and Subparts A and C of Part 164, the “Security Rule”), and the notification in case of breach of unsecured protected health information (45 C.F.R. Part 160 and Subparts A and D of Part 164, the “Breach Notification Rule”. HHS has the authority to conduct the investigations of complaints alleging violations of the Privacy and Security Rules by covered entities, and a covered entity must cooperate with HHS’ investigation. 45 C.F.R. §160.306(c) and §160.310(b). Affinity Health Plan (AHP) is a covered entity, as defined at 45 C.F.R. §160.103, and therefore is required to comply with the Privacy and Security Rules.
