Sec. 503. GAO study on the privacy and security risks of electronic transmission of individually identifiable health information to and from entities not covered by the Health Insurance Portability and Accountability Act

222 words·~1 min read·/bill/116/s/1895/is/section-503

A research copy — for the controlling text, always check the official state or federal source. Not legal advice.

Not later than 1 year after the date of enactment of this Act, the Comptroller General of the United States shall conduct a study to— describe the roles of Federal agencies and the private sector with respect to protecting the privacy and security of individually identifiable health information transmitted electronically to and from entities not covered by the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note); identify recent developments regarding the use of application programming interfaces to access individually identifiable health information, and implications for the privacy and security of such information; identify practices in the private sector, such as terms and conditions for use, relating to the privacy, disclosure, and secondary uses of individually identifiable health information transmitted electronically to or from entities, selected by an individual, that are not subject to the regulations promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996; and identify steps the public and private sectors can take to improve the private and secure access to and availability of individually identifiable health information.

Not later than 1 year after the date of enactment of this Act, the Comptroller General of the United States shall submit to Congress a report concerning the findings of the study conducted under subsection (a).

Connections1 off-index

1 reference not yet in our index

42 USC 1320d–2

Citation graph

cites case law

Sec. 503

GAO study on the privacy and security risks of electronic transmission of individually identifiable health information to and from entities not covered by the Health Insurance Portability and Accountability Act

Cite42 USC 1320d–2

Cites 1Cited by 0 across 0 sources