U.S. CODE

U.S. Code

§ 300jj-19. Miscellaneous provisions

(a) Relation to HIPAA privacy and security law

(1) In general

With respect to the relation of this subchapter to HIPAA privacy and security law:

(A) This subchapter may not be construed as having any effect on the authorities of the Secretary under HIPAA privacy and security law.

(B) The purposes of this subchapter include ensuring that the health information technology standards and implementation specifications adopted under section 300jj–14 of this title take into account the requirements of HIPAA privacy and security law.

(2) Definition

For purposes of this section, the term “HIPAA privacy and security law” means—

(A) the provisions of part C of title XI of the Social Security Act [42 U.S.C. 1320d et seq.], section 264 of the Health Insurance Portability and Accountability Act of 1996, and subtitle D of title IV ^[1] of the Health Information Technology for Economic and Clinical Health Act; and

(B) regulations under such provisions.

(b) Flexibility

In administering the provisions of this subchapter, the Secretary shall have flexibility in applying the definition of health care provider under section 300jj (3) of this title, including the authority to omit certain entities listed in such definition when applying such definition under this subchapter, where appropriate.

[1] See References in Text note below.

Tips