Security Requirements -- General.

22 CCR 126070

Source text

7 segments

22 CCR 126070

§ 126070. Security Requirements -- General.

(a)

All Demonstration Project Participants must:

(1)

Protect the confidentiality, integrity, and availability of all electronic IHI the Demonstration Project Participant creates, receives, maintains, or transmits.

(2)

Protect against any reasonably anticipated threats or hazards to the security or integrity of such information.

(3)

Protect against any reasonably anticipated uses or disclosures of such information that are not permitted or required under California law.

(4)

Monitor compliance with these requirements by the Demonstration Project Participant's workforce.

(b)

All Demonstration Project Participants and any recipient of IHI received in a demonstration project, who are a HIPAA covered entity or a business associate of a HIPAA covered entity, are required to comply with the HIPAA security standards in Subpart C of Part 164, 45 C.F.R. § 164.302 et seq, with respect to the IHI and any risk assessment must include an evaluation of the additional risk incurred by being a Participant in an exchange of health information.

Source outline

6 anchors in this source