Source: https://www.law.cornell.edu/cfr/text/45/164.306
Timestamp: 2020-03-31 21:00:46
Document Index: 712799254

Matched Legal Cases: ['§ 164', '§ 164', '§ 164', '§ 164', '§ 164', '§ 164', '§ 164', '§ 164']

45 CFR § 164.306 - Security standards: General rules. | CFR | US Law | LII / Legal Information Institute
Subpart C. Security Standards for the Protection of Electronic Protected Health Information
Section 164.306. Security standards: General rules.
45 CFR § 164.306 - Security standards: General rules.
(c) Standards. A covered entity or business associate must comply with the applicable standards as provided in this section and in §§ 164.308, 164.310, 164.312, 164.314 and 164.316 with respect to all electronic protected health information.
(3) When a standard adopted in § 164.308, § 164.310, § 164.312, § 164.314, or § 164.316 includes addressable implementation specifications, a covered entity or business associate must -
(ii) As applicable to the covered entity or business associate -
(B) If implementing the implementation specification is not reasonable and appropriate -