§17921 Definitions

Summary

Defines key words used later in this subchapter. breach — unauthorized getting, access, use, or sharing of protected health information that harms its privacy or security, but it does not include certain accidental internal access or accidental sharing between staff at the same facility if the information is not further shared. business associate — defined in 45 C.F.R. 160.103. covered entity — defined in 45 C.F.R. 160.103. disclose/disclosure — defined in 45 C.F.R. 160.103. electronic health record — an electronic record of a person’s health information that clinicians create, store, and use. health care operation — defined in 45 C.F.R. 164.501. health care provider — defined in 45 C.F.R. 160.103. health plan — defined in 45 C.F.R. 160.103. National Coordinator — the head of the Office of the National Coordinator for Health Information Technology under section 300jj–11(a) of this title. payment — defined in 45 C.F.R. 164.501. personal health record — an electronic, identifiable health record pulled from many sources that the individual manages or controls. protected health information — defined in 45 C.F.R. 160.103. Secretary — the Secretary of Health and Human Services. security — defined in 45 C.F.R. 164.304. State — each State, the District of Columbia, Puerto Rico, the Virgin Islands, Guam, American Samoa, and the Northern Mariana Islands. treatment — defined in 45 C.F.R. 164.501. use — defined in 45 C.F.R. 160.103. vendor of personal health records — any entity (not a covered entity) that offers or keeps a personal health record.