48 CFR 324.7000
324.7000 Scope of subpart.
United States · 48 CFR — Federal Acquisition Regulations System · Status: effective
Cite this
- Citation
- 48 CFR 324.7000, 324.7000 Scope of subpart, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/245115
- Permanent ID
ys:prov:245115@1- SHA-256
fdd2ea4bc95a3705d3031c120db07def5147c88ba88419cc68fb8482ae718463
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
All individually identifiable health information that is Protected Health Information (PHI), as defined in 45 CFR 160.103 shall be administered in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) implementing regulations at 45 CFR parts 160 and 164 (the HIPAA Privacy, Security, and Breach Notification Rules). The term “HIPAA” is used in this part to refer to title II, subtitle F of the HIPAA statute, at part C of title XI of the Social Security Act, 42 U.S.C. 1320d et seq., section 264 of HIPAA, subtitle D of title XIII of the American Recovery and Reinvestment Act of 2009, and regulations under such provisions.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.