Part A - IMPROVED PRIVACY PROVISIONS AND SECURITY PROVISIONS

Section 17931 - Application of security provisions and penalties to business associates of covered entities; annual guidance on security provisions
Section 17932 - Notification in the case of breach
Section 17933 - Education on health information privacy
Section 17934 - Application of privacy provisions and penalties to business associates of covered entities
Section 17935 - Restrictions on certain disclosures and sales of health information; accounting of certain protected health information disclosures; access to certain information in electronic format
Section 17936 - Conditions on certain contacts as part of health care operations
Section 17937 - Temporary breach notification requirement for vendors of personal health records and other non-HIPAA covered entities
Section 17938 - Business associate contracts required for certain entities
Section 17939 - Improved enforcement
Section 17940 - Audits
Section 17941 - Recognition of security practices