{"data":{"id":"us/45-cfr-164.104","jurisdiction":"us","citation":"45 CFR 164.104","heading":"Applicability.","body":"(a) Except as otherwise provided, the standards, requirements, and implementation specifications adopted under this part apply to the following entities:\n(1) A health plan.\n(2) A health care clearinghouse.\n(3) A health care provider who transmits any health information in electronic form in connection with a transaction covered by this subchapter.\n(b) Where provided, the standards, requirements, and implementation specifications adopted under this part apply to a business associate.","path":["Title 45—Public Welfare","SUBTITLE A—Department of Health and Human Services","SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS","PART 164—SECURITY AND PRIVACY","Subpart A—General Provisions"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-45.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:26:21Z","sha256":"294baad8aec221c82ecbc12263c474aadd7195e92e417526f8db14446f21131f","source_id":"us-cfr","stale":true,"prev":"us/45-cfr-164.103","next":"us/45-cfr-164.105"},"notice":"GroundRules: Original legal text. Not legal advice."}