,,ii  #aaf? ,,congress  #b;d ,session   
,h4 ,r4 #ghih  ,,9 ,,! ,,s5ate ,,( ,,!  
,,unit$ ,,/ates  ,decemb] #aj1          
#bjbj,receiv$  ,,an ,,act  ,to am5d !   
,heal? ,in=mation ,te*nology = ,economic
 & ,cl9ical ,heal? ,act to require !    
,secret>y ( ,heal? & ,human ,s]vices to 
consid] c]ta9 recogniz$ security        
practices ( cov]$ entities & bus9ess    
associates :5 mak+ c]ta9 det]m9ations1 &
 = o!r purposes4  #a4 ,recognition (    
security practices ,"p #a ( subtitle ,d 
( ! ,heal? ,in=mation ,te*nology =      
,economic & ,cl9ical ,heal? ,act 7#db   
,u4,s4,c4 #agica et seq47 is am5d$ by   
add+ at ! end ! foll[+3  #acdab4        
,recognition ( security practices  7a7  
,9 g5]al ,consi/5t ) ! au?ority ( !     
,secret>y "u sections #aagf & #aagg ( ! 
,social ,security ,act1 :5 mak+         
det]m9ations relat+ to f9es "u su*      
section #aagf 7z am5d$ by section       
#acdaj7 or su* section #aagg1 decreas+ !
 l5g? & ext5t ( an audit "u section     
#acdaa1 or rem$ies o!rwise agre$ to by !

 ,secret>y1 ! ,secret>y %all consid]    
:e!r ! cov]$ entity or bus9ess associate
 has adequately demon/rat$ t x _h1 = n  
less ?an ! previ\s #ab mon?s1 recogniz$ 
security practices 9 place t may-- 7#a7 
mitigate f9es "u section #aagf ( !      
,social ,security ,act 7z am5d$ by      
section #acdaj72  7#b7 result 9 ! e>ly1 
favorable t]m9ation ( an audit "u       
section #acdaa2 &  7#c7 mitigate !      
rem$ies t w\ld o!rwise be agre$ to 9 any
 agreem5t ) respect to resolv+ pot5tial 
violations ( ! ,,hipaa ,security rule   
7"p #afj ( title #de ,code ( ,f$]al     
,regulations & subp>ts ,a & ,c ( "p #afd
 ( su* title7 betwe5 ! cov]$ entity or  
bus9ess associate & ! ,dep>tm5t ( ,heal?
 & ,human ,s]vices4  7b7 ,def9ition &   
miscellane\s provisions  7#a7 ,recogniz$
 security practices ,! t]m recogniz$    
security practices means ! /&>ds1       
guidel9es1 be/ practices1 me?odologies1 
proc$ures1 & processes develop$ "u      
section #b7;c77#ae7 ( ! ,national       
,in/itute ( ,/&>ds & ,te*nology ,act1 ! 

approa*es promulgat$ "u section #dje7;d7
 ( ! ,cyb]security ,act ( #bjae1 & o!r  
programs & processes t address          
cyb]security & t are develop$1          
recogniz$1 or promulgat$ ?r\gh          
regulations "u o!r /atutory au?orities4 
,su* practices %all be det]m9$ by !     
cov]$ entity or bus9ess associate1      
consi/5t ) ! ,,hipaa ,security rule 7"p 
#afj ( title #de ,code ( ,f$]al         
,regulations & subp>ts ,a & ,c ( "p #afd
 ( su* title74  7#b7 ,limitation ,no?+ 9
 ?is section %all be con/ru$ z provid+ !
 ,secret>y au?ority to increase f9es "u 
section #aagf ( ! ,social ,security ,act
 7z am5d$ by section #acdaj71 or ! l5g?1
 ext5t or quantity ( audits "u section  
#acdaa1 due to a lack ( compliance ) !  
recogniz$ security practices4  7#c7 ,no 
liability = nonp>ticipation ,subject to 
p>agraph 7#d71 no?+ 9 ?is section %all  
be con/ru$ to subject a cov]$ entity or 
bus9ess associate to liability = elect+ 
n to engage 9 ! recogniz$ security      
practices def9$ by ?is section4  7#d7   

,rule ( con/ruction ,no?+ 9 ?is section 
%all be con/ru$ to limit ! ,secret>y's  
au?ority to en=ce ! ,,hipaa ,security   
rule 7"p #afj ( title #de ,code ( ,f$]al
 ,regulations & subp>ts ,a & ,c ( "p    
#afd ( su* title71 or to sup]s$e or     
conflict ) an entity or bus9ess         
associate's obligations "u ! ,,hipaa    
,security rule4  4  #b4 ,te*nical       
correction  7a7 ,9 g5]al ,section       
#cjbb7;b7 ( ! ,public ,heal? ,s]vice    
,act 7#db ,u4,s4,c4 #cjj;jj-#eb7;b77 is 
am5d$ by add+ at ! end ! foll[+ new     
p>agraph3  7#d7 ,application (          
au?orities "u ,inspector ,g5]al ,act (  
#aigh ,9 c>ry+ out ?is subsection1 !    
,inspector ,g5]al %all h ! same         
au?orities z provid$ "u section #f ( !  
,inspector ,g5]al ,act ( #aigh 7#e      
,u4,s4,c4 ,app474  4  7b7 ,effective    
date ,! am5dm5t made by subsection 7a7  
%all take effect z if includ$ 9 !       
enactm5t ( ! #ba/ ,c5tury ,cures ,act   
7,public ,law #aad-bee74  ,pass$ ! ,h\se
 ( ,repres5tatives ,decemb] #i1         

#bjbj4;,*]yl ,l4 ,johnson1,cl]k4