{"data":{"id":"us/45-cfr-164.302","jurisdiction":"us","citation":"45 CFR 164.302","heading":"Applicability.","body":"A covered entity or business associate must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information of a covered entity.","path":["Title 45—Public Welfare","SUBTITLE A—Department of Health and Human Services","SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS","PART 164—SECURITY AND PRIVACY","Subpart C—Security Standards for the Protection of Electronic Protected Health Information"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-45.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:26:21Z","sha256":"64860f4db66fb29b053adc9ea5dcd6663f549f0dfc43db65f2b7a7abb2fca538","source_id":"us-cfr","stale":true,"prev":"us/45-cfr-164.106","next":"us/45-cfr-164.304"},"notice":"GroundRules: Original legal text. Not legal advice."}