NRPM: Standards for Privacy of Individually Identifiable Health Information. § 164.524 Effective date.

11/03/1999

A covered entity must be in compliance with this subpart not later than 24 months following the effective date of this rule, except that a covered entity that is a small health plan must be in compliance with this subpart not later than 36 months following the effective date of the rule.