,i  #aaf? ,,congress  #a/ ,session  ,h4 
,r4 #echf  ,,9 ,,! ,,h\se ,,(           
,,repres5tatives  ,decemb] #aj1         
#bjai,mr4 ,mc,nerney 7= himself & ,mr4  
,buc%on7 introduc$ ! foll[+ bill2 :i* 0 
ref]r$ to ! ,committee on ,en]gy &      
,comm]ce1 & 9 addition to ! ,committee  
on ,ways & ,means1 = a p]iod to be      
subsequ5tly det]m9$ by ! ,speak]1 9 ea* 
case = consid]ation ( su* provisions z  
fall )9 ! jurisdiction ( ! committee    
conc]n$  ,a ,,bill  ,to am5d ! ,heal?   
,in=mation ,te*nology = ,economic &     
,cl9ical ,heal? ,act to require         
consid]ation1 9 c]ta9 circum/ances1 (   
:e!r a cov]$ entity or bus9ess associate
 has adequately demon/rat$ t x _h       
recogniz$ security practices1 & = o!r   
purposes4  #a4 ,%ort title ,?is ,act may
 be cit$ z ! ,promot+ ,bett] ,pati5t    
,data ,security ,act ( #bjai4  #b4      
,recognition ( security practices ,"p #a
 ( subtitle ,d ( ! ,heal? ,in=mation    
,te*nology = ,economic & ,cl9ical ,heal?
 ,act 7#db ,u4,s4,c4 #agica et seq47 is 

am5d$ by add+ at ! end ! foll[+3        
#acdab4 ,recognition ( security         
practices  7a7 ,9 g5]al ,consi/5t ) !   
au?ority ( ! ,secret>y "u sections #aagf
 & #aagg ( ! ,social ,security ,act1 :5 
mak+ det]m9ations relat+ to f9es "u     
section #acdaj1 decreas+ ! l5g? & ext5t 
( an audit "u section #acdaa1 or rem$ies
 o!rwise agre$ to by ! ,secret>y1 !     
,secret>y %all consid] :e!r ! cov]$     
entity or bus9ess associate has         
adequately demon/rat$ t x _h1 = n less  
?an ! previ\s #ab mon?s1 recogniz$      
security practices 9 place t may--  7#a7
 mitigate f9es "u section #acdaj2  7#b7 
result 9 ! e>ly1 favorable t]m9ation (  
an audit "u section #acdaa2 &  7#c7     
mitigate ! rem$ies t w\ld o!rwise be    
agre$ to 9 any agreem5t ) respect to    
resolv+ pot5tial violations ( ! ,,hipaa 
,security rule 7"p #afj ( title #de     
,code ( ,f$]al ,regulations & subp>ts ,a
 & ,c ( "p #afd ( su* title7 betwe5 !   
cov]$ entity or bus9ess associate & !   
,dep>tm5t ( ,heal? & ,human ,s]vices4   

7b7 ,def9ition & miscellane\s provisions
  7#a7 ,recogniz$ security practices ,! 
t]m recogniz$ security practices means !
 /&>ds1 guidel9es1 be/ practices1       
me?odologies1 proc$ures1 & processes    
develop$ "u section #b7;c77#ae7 ( !     
,national ,in/itute ( ,/&>ds &          
,te*nology ,act1 ! approa*es promulgat$ 
"u section #dje7;d7 ( ! ,cyb]security   
,act ( #bjae1 & o!r programs & processes
 t address cyb]security & t are         
develop$1 recogniz$1 or promulgat$ ?r\gh
 regulations "u o!r /atutory au?orities4
 ,su* practices %all be det]m9$ by !    
cov]$ entity or bus9ess associate4  7#b7
 ,limitation ,no?+ 9 ?is section %all be
 con/ru$ z provid+ ! ,secret>y au?ority 
to increase f9es "u section #acdaj1 or !
 l5g?1 ext5t or quantity ( audits "u    
section #acdaa1 due to a lack (         
compliance ) ! recogniz$ security       
practices4  7#c7 ,no liability =        
nonp>ticipation ,subject to p>agraph    
7#d71 no?+ 9 ?is section %all be con/ru$
 to subject a cov]$ entity or bus9ess   

associate to liability = elect+ n to    
engage 9 ! recogniz$ security practices 
def9$ by ?is section4  7#d7 ,rule (     
con/ruction ,no?+ 9 ?is section %all be 
con/ru$ to limit ! ,secret>y's au?ority 
to en=ce ! ,,hipaa ,security rule 7"p   
#afj ( title #de ,code ( ,f$]al         
,regulations & subp>ts ,a & ,c ( "p #afd
 ( su* title71 or to sup]s$e or conflict
 ) an entity or bus9ess associate's     
obligations "u ! ,,hipaa ,security rule4
  4