Standards for Privacy of Individually Identifiable Health Information. Final Privacy Rule Preamble.. Section 164.534 - Compliance Dates for Initial Implementation of the Privacy Standards

12/28/2000

In the NPRM, we provided that a covered entity must be in compliance with this subpart not later than 24 months following the effective date of this rule, except that a covered entity that is a small health plan must be in compliance with this subpart not later than 36 months following the effective date of the rule.

The final rule did not make any substantive changes. The format is changed so as to more clearly present the various compliance dates. The final rule lists the types of covered entities and then the various dates that would apply to each of these entities.