HIPAA Security Rule (45 CFR Parts 160, 162, 164)

The final Security rule was published in the Federal Register on February 20, 2003. The compliance deadline for the Security rule was April 21, 2005 (April 21, 2006 for small health plans). The CMS Web site is a first line resource on the HIPAA Security Rule. Go to http://www.cms.hhs.gov/hipaa/hipaa2/default.asp and search the site.

Please note: HIPAA covered entities must also comply with the security provisions of the HIPAA Privacy Rule.