2. A new Part 164 is added to read as follows:
PART 164 – SECURITY AND PRIVACY
Subpart A – General Provisions
164.102 Statutory basis.
164.106 Relationship to other parts.
Subparts B-D – [Reserved]
Subpart E – Privacy of Individually Identifiable Health Information
164.502 Uses and disclosures of protected health information: general rules.
164.504 Uses and disclosures: organizational requirements.
164.506 Consent for uses or disclosures to carry out treatment, payment, and health care operations
164.508 Uses and disclosures for which an authorization is required.
164.510 Uses and disclosures requiring an opportunity for the individual to agree or to object.
164.512 Uses and disclosures for which consent, an authorization, or opportunity to agree or object is not required.
164.514 Other requirements relating to uses and disclosures of protected health information.
164.520 Notice of privacy practices for protected health information.
164.522 Rights to request privacy protection for protected health information.
164.524 Access of individuals to protected health information.
164.526 Amendment of protected health information.
164.528 Accounting of disclosures of protected health information.
164.530 Administrative requirements.
164.532 Transition requirements.
164.534 Compliance dates for initial implementation of the privacy standards.
Authority: 42 U.S.C. 1320d-2 and 1320d-4, sec. 264 of Pub. L. 104-191, 110 Stat. 2033- 2034(42 U.S.C. 1320(d-2(note)).