---
kind: "section"
citation: "48 C.F.R. § 324.7000"
title: "48"
number: "324.7000"
heading: "Scope of subpart."
url: "https://uscodex.org/cfr/48/324.7000"
---

# §324.7000. Scope of subpart.


All individually identifiable health information that is Protected Health Information (PHI), as defined in [45 CFR 160.103](/cfr/45/160.103.md) shall be administered in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) implementing regulations at 45 CFR parts [160](/cfr/45/part160.md) and [164](/cfr/45/part164.md) (the HIPAA Privacy, Security, and Breach Notification Rules). The term “HIPAA” is used in this part to refer to title II, subtitle F of the HIPAA statute, at part C of title XI of the Social Security Act, [42 U.S.C. 1320d](/usc/42/1320d.md) et seq., [section 264](/cfr/48/264.md) of HIPAA, subtitle D of title XIII of the American Recovery and Reinvestment Act of 2009, and regulations under such provisions.


## Notes

### Authority

Authority: 5 U.S.C. 301; 40 U.S.C. 121(c)(2).

### Source

Source: 80 FR 72151, Nov. 18, 2015, unless otherwise noted.