GroundRules
45 CFR 164.414: Administrative requirements and burden of proof.
Where this section sits in the code
- Title 45—Public Welfare
- SUBTITLE A—Department of Health and Human Services
- SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS
- PART 164—SECURITY AND PRIVACY
- Subpart D—Notification in the Case of Breach of Unsecured Protected Health Information
(a) Administrative requirements. A covered entity is required to comply with the administrative requirements of § 164.530(b), (d), (e), (g), (h), (i), and (j) with respect to the requirements of this subpart.
(b) Burden of proof. In the event of a use or disclosure in violation of subpart E, the covered entity or business associate, as applicable, shall have the burden of demonstrating that all notifications were made as required by this subpart or that the use or disclosure did not constitute a breach, as defined at § 164.402.
Collected 2026-08-27T02:26:21Z. Source file · JSON