(ii) Safeguard requirements. An affiliated covered entity must ensure that it complies with the applicable requirements of this part, including, if the affiliated covered entity combines the functions of a health plan, health care provider, or health care clearinghouse, § 164.308(a)(4)(ii)(A) and § 164.504(g), as applicable. (c)(1) Standard: Documentation. A covered entity must maintain a written or electronic record of a designation as required by paragraphs (a) or (b) of this section. (2) Implementation specification: Retention period. A covered entity must retain the documentation as required by paragraph (c)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later. 164.106 Relationship to other parts. § Go to Central ToC. In complying with the requirements of this part, covered entities and, provided, business associates, are required to comply with the applicable provisions of parts 160 and 162 of this subchapter. The authority citation for subpart C of part 164 is revised to read as follows: Authority: 42 U.S.C. 1320d-2 and 1320d-4; sec. 13401, Pub. L. 111-5, 123 Stat. 260. § 164.400 Applicability. Go to Central ToC. The requirements of this subpart shall apply with respect to breaches of protected health information occurring on or after September 23, 2009. § 164.402 Definitions. Go to Central ToC. As used in this subpart, the following terms have the following meanings:
(ii) Safeguard requirements. An affiliated covered entity must ensure that it complies with the applicable requirements of this part, including, if the affiliated covered entity combines the functions of a health plan, health care provider, or health care clearinghouse, § 164.308(a)(4)(ii)(A) and § 164.504(g), as applicable. (c)(1) Standard: Documentation. A covered entity must maintain a written or electronic record of a designation as required by paragraphs (a) or (b) of this section. (2) Implementation specification: Retention period. A covered entity must retain the documentation as required by paragraph (c)(1) of this section for 6 years from the date of its creation or the date when it last was in effect, whichever is later. § 164.106 Relationship to other parts. Go to Central ToC. In complying with the requirements of this part, covered entities and, provided, business associates, are required to comply with the applicable provisions of parts 160 and 162 of this subchapter. The authority citation for subpart C of part 164 is revised to read as follows: Authority: 42 U.S.C. 1320d-2 and 1320d-4; sec. 13401, Pub. L. 111-5, 123 Stat. 260. § 164.400 Applicability. Go to Central ToC. The requirements of this subpart shall apply with respect to breaches of protected health information occurring on or after September 23, 2009. § 164.402 Definitions. Go to Central ToC. As used in this subpart, the following terms have the following meanings:
TVCLD%20HIPAA%20Privacy%20Manual%20%20HITECH%20UpdateFINAL.docx