Source: https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html
Timestamp: 2019-04-19 06:26:55+00:00

Document:
Covered Entity Responsibilities. If a covered entity knows of an activity or practice of the business associate that constitutes a material breach or violation of the business associate’s obligation, the covered entity must take reasonable steps to cure the breach or end the violation.29 Violations include the failure to implement safeguards that reasonably and appropriately protect e-PHI.
Learn more about enforcement and penalties in the Privacy Rule Summary - PDF and on OCR's Enforcement Rule page.
 45 C.F.R. § 164.306(d)(3)(ii)(B)(1); 45 C.F.R. § 164.316(b)(1).
 45 C.F.R. § 164.306(e); 45 C.F.R. § 164.308(a)(8).
 45 C.F.R. § 164.306(b)(2)(iv); 45 C.F.R. § 164.306(e).
 45 C.F.R. § 164.308(a)(3) & (4).
 45 C.F.R. §§ 164.310(b) & (c).

References: § 164
 § 164
 § 164
 § 164
 § 164
 § 164
 § 164