Standards for Privacy of Individually Identifiable Health Information. Final Privacy Rule Preamble.. Section 160.310 - Responsibilities of Covered Entities


A covered entity must keep such records and submit such compliance reports, in such time and manner and containing such information, necessary to enable the Secretary to ascertain whether the covered entity has complied or is complying with the applicable requirements of part 160 and the applicable standards, requirements, and implementation specifications of Subpart E of Part 164. Refer to § 164.530 for discussion.