The HITECH Act has placed additional obligations for privacy and security on business associates and also extends the threat of civil and criminal penalties for violations of privacy and security standards to business associates.

Question

Quizplus · Accepted Answer

The HITECH Act, part of the American Recovery and Reinvestment Act of 2009, expanded the responsibilities of business associates under HIPAA, making them directly liable for compliance with certain HIPAA Privacy and Security Rules, and subject to civil and criminal penalties for violations.

The HITECH Act Has Placed Additional Obligations for Privacy and Security