{"abstract":"This final rule adopts standards for the security of electronic protected health information to be implemented by health plans, health care clearinghouses, and certain health care providers. The use of the security standards will improve the Medicare and Medicaid programs, and otherFederal health programs and private health programs, and the effectiveness and efficiency of the health care industry in general by establishing a level of protection for certain electronic health information. This final rule implements some of the requirements of the Administrative Simplification subtitle of the Health Insurance Portability andAccountability Act of 1996 (HIPAA).","action":"Final rule.","agencies":[{"raw_name":"DEPARTMENT OF HEALTH AND HUMAN SERVICES","name":"Health and Human Services Department","id":221,"url":"https://www.federalregister.gov/agencies/health-and-human-services-department","json_url":"https://www.federalregister.gov/api/v1/agencies/221","parent_id":null,"slug":"health-and-human-services-department"},{"raw_name":"Office of the Secretary"}],"body_html_url":"https://www.federalregister.gov/documents/full_text/html/2003/02/20/03-3877.html","cfr_references":[{"chapter":null,"citation_url":null,"part":160,"title":45},{"chapter":null,"citation_url":null,"part":162,"title":45},{"chapter":null,"citation_url":null,"part":164,"title":45}],"citation":"68 FR 8334","comment_url":null,"comments_close_on":null,"correction_of":null,"corrections":[],"dates":"Effective Date: These regulations are effective on April 21, 2003.","disposition_notes":null,"docket_ids":["CMS-0049-F"],"dockets":[],"document_number":"03-3877","effective_on":"2003-04-21","end_page":8381,"executive_order_notes":null,"executive_order_number":null,"explanation":null,"full_text_xml_url":"https://www.federalregister.gov/documents/full_text/xml/2003/02/20/03-3877.xml","html_url":"https://www.federalregister.gov/documents/2003/02/20/03-3877/health-insurance-reform-security-standards","images":{},"images_metadata":{},"json_url":"https://www.federalregister.gov/api/v1/documents/03-3877?publication_date=2003-02-20","mods_url":"https://www.govinfo.gov/metadata/granule/FR-2003-02-20/03-3877/mods.xml","not_received_for_publication":null,"page_length":48,"page_views":{"count":4426,"last_updated":"2026-04-17 08:15:05 -0400"},"pdf_url":"https://www.govinfo.gov/content/pkg/FR-2003-02-20/pdf/03-3877.pdf","presidential_document_number":null,"proclamation_number":null,"public_inspection_pdf_url":null,"publication_date":"2003-02-20","raw_text_url":"https://www.federalregister.gov/documents/full_text/text/2003/02/20/03-3877.txt","regulation_id_number_info":{"0938-AI57":{"issue":"200210","html_url":"https://www.federalregister.gov/regulations/0938-AI57/security-standards-cms-0049-f-","title":"Security Standards (CMS-0049-F)","xml_url":"http://www.reginfo.gov/public/do/eAgendaViewRule?pubId=200210&RIN=0938-AI57&operation=OPERATION_EXPORT_XML","priority_category":"Other Significant"}},"regulation_id_numbers":["0938-AI57"],"regulations_dot_gov_info":{},"regulations_dot_gov_url":null,"significant":true,"signing_date":null,"start_page":8334,"subtype":null,"title":"Health Insurance Reform: Security Standards","toc_doc":"Security standards","toc_subject":"Health insurance reform:","topics":["Administrative practice and procedure","Employee benefit plans","Health","Health care","Health facilities","Health insurance","Health records","Hospitals","Medicaid","Medical research","Medicare","Privacy","Reporting and recordkeeping requirements"],"type":"Rule","volume":68}