United States. Congress, American Recovery and Reinvestment Act of 2009…
“ Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions. Sec. 13402. Notification in the case of breach. Sec. 13403. Education on health information privacy. Sec. 13404. Application of privacy provisions and penalties to business associates of covered entities. Sec. 13405. Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format. ”
