HITECH Act

1. HITECH enforcement

   Tiered civil money penalties and enforcement changes.

2. Omnibus Rule

   Business associate direct liability and modifications to HIPAA rules.

3. Breach notification

   HITECH breach notification requirements.

4. EHR incentive and certification

   ONC certification program and Promoting Interoperability.

5. Recognized security practices

   Mitigation of penalties for recognized security practices (Public Law 116-321).

6. Electronic access and accounting

   Right to electronic copy of PHI.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.

• 42 CFR Part 2 (SUD records)
• HIPAA Administrative Simplification (Transactions and Code Sets)
• HIPAA Breach Notification Rule
• HIPAA De-identification
• HIPAA Privacy Rule
• HIPAA Security Rule
• HITRUST CSF
• No Surprises Act
• ONC Information Blocking (Cures Act)