Explosive growth in digital health over the last few years means there are many developers and managers who haven’t worked under HIPAA before. This guide is written for startups (and small businesses operating online) who could use some help with the basics of HIPAA compliance.
(a) Health care providers. A covered health care provider must comply with the implementation specifications in § 162.410 no later than May 23, 2007.
(b) Health plans. A health plan must comply with the implementation specifications in § 162.412 no later than one of the following dates:
(1) A health plan that is not a small health plan--May 23, 2007.
(2) A small health plan--May 23, 2008.
(c) Health care clearinghouses. A health care clearinghouse must comply with the implementation specifications in § 162.414 no later than May 23, 2007.
[69 FR 3468, Jan. 23, 2004, as amended at 77 FR 54719, Sept. 5, 2012]