---
kind: "section"
citation: "45 C.F.R. § 164.318"
title: "45"
number: "164.318"
heading: "Compliance dates for the initial implementation of the security standards."
url: "https://uscodex.org/cfr/45/164.318"
---

# §164.318. Compliance dates for the initial implementation of the security standards.

- (a) **Health plan.**
  - (1) A health plan that is not a small health plan must comply with the applicable requirements of this subpart no later than April 20, 2005.
  - (2) A small health plan must comply with the applicable requirements of this subpart no later than April 20, 2006.
- (b) **Health care clearinghouse.** A health care clearinghouse must comply with the applicable requirements of this subpart no later than April 20, 2005.
- (c) **Health care provider.** A covered health care provider must comply with the applicable requirements of this subpart no later than April 20, 2005.

## Notes

### Authority

Authority: 42 U.S.C. 1320d-2 and 1320d-4; sec. 13401, Pub. L. 111-5, 123 Stat. 260.

### Source

Source: 68 FR 8376, Feb. 20, 2003, unless otherwise noted.

### Authority

Authority: 42 U.S.C. 1302(a); 42 U.S.C. 1320d-1320d-9; sec. 264, Pub. L. 104-191, 110 Stat. 2033-2034 (42 U.S.C. 1320d-2(note)); and secs. 13400-13424, Pub. L. 111-5, 123 Stat. 258-279.

### Source

Source: 65 FR 82802, Dec. 28, 2000, unless otherwise noted.