---
kind: "section"
citation: "42 U.S.C. § 300jj–19"
title: "42"
title_heading: "The Public Health and Welfare"
number: "300jj–19"
heading: "Miscellaneous provisions"
release: "119-102"
date: "2026-07-12"
url: "https://uscodex.org/usc/42/300jj-19"
units:
  - "Chapter 6A — Public Health Service"
  - "Subchapter XXVIII — Health Information Technology and Quality"
  - "Part A — Promotion of Health Information Technology"
---

# §300jj–19. Miscellaneous provisions

- (a) **Relation to HIPAA privacy and security law—**
  - (1) **In general—** With respect to the relation of this subchapter to HIPAA privacy and security law:
    - (A) This subchapter may not be construed as having any effect on the authorities of the [Secretary](/usc/42/201.md?p=c) under HIPAA privacy and security law.
    - (B) The purposes of this subchapter include ensuring that the [health information technology](/usc/42/300jj.md?p=5) standards and implementation specifications adopted under [section 300jj–14 of this title](/usc/42/300jj–14.md) take into account the requirements of HIPAA privacy and security law.
  - (2) **Definition—** For purposes of this section, the term “HIPAA privacy and security law” means—
    - (A) the provisions of part C of title XI of the Social Security Act [[42 U.S.C. 1320d](/usc/42/1320d.md) et seq.], [section 264](/usc/42/264.md) of the Health Insurance Portability and Accountability Act of 1996, and subtitle D of title IV[^1] of the [Health Information Technology](/usc/42/300jj.md?p=5) for Economic and Clinical Health Act; and
    - (B) [regulations](/usc/42/201.md?p=d) under such provisions.
- (b) **Flexibility—** In administering the provisions of this subchapter, the [Secretary](/usc/42/201.md?p=c) shall have flexibility in applying the definition of [health care provider](/usc/42/300jj.md?p=3) under [section 300jj(3) of this title](/usc/42/300jj.md?p=3), including the authority to omit certain entities listed in such definition when applying such definition under this subchapter, where appropriate.
- (c) **Promoting patient access to electronic health information through health information exchanges—**
  - (1) **In general—** The [Secretary](/usc/42/201.md?p=c) shall use existing authorities to encourage partnerships between [health information](/usc/42/300jj.md?p=4) [exchange](/usc/42/300gg–91.md?p=d-21) organizations and networks and [health care providers](/usc/42/300jj.md?p=3), [health plans](/usc/42/300jj.md?p=6), and other appropriate entities with the goal of offering patients access to their electronic [health information](/usc/42/300jj.md?p=4) in a single, longitudinal format that is easy to understand, secure, and may be updated automatically.
  - (2) **Education of providers—** The [Secretary](/usc/42/201.md?p=c), in coordination with the Office for Civil Rights of the Department of Health and Human [Services](/usc/42/201.md?p=a), shall—
    - (A) educate [health care providers](/usc/42/300jj.md?p=3) on ways of leveraging the capabilities of [health information](/usc/42/300jj.md?p=4) [exchanges](/usc/42/300gg–91.md?p=d-21) (or other relevant platforms) to provide patients with access to their electronic [health information](/usc/42/300jj.md?p=4);
    - (B) clarify misunderstandings by [health care providers](/usc/42/300jj.md?p=3) about using [health information](/usc/42/300jj.md?p=4) [exchanges](/usc/42/300gg–91.md?p=d-21) (or other relevant platforms) for patient access to electronic [health information](/usc/42/300jj.md?p=4); and
    - (C) to the extent practicable, educate [providers](/usc/42/299b–21.md?p=8) about [health information](/usc/42/300jj.md?p=4) [exchanges](/usc/42/300gg–91.md?p=d-21) (or other relevant platforms) that employ some or all of the capabilities described in [paragraph (1)](#c-1).
  - (3) **Requirements—** In carrying out [paragraph (1)](#c-1), the [Secretary](/usc/42/201.md?p=c), in coordination with the Office for Civil Rights, shall issue guidance to [health information](/usc/42/300jj.md?p=4) [exchanges](/usc/42/300gg–91.md?p=d-21) related to best [practices](/usc/42/17061.md?p=19) to ensure that the electronic [health information](/usc/42/300jj.md?p=4) provided to patients is—
    - (A) private and secure;
    - (B) accurate;
    - (C) verifiable; and
    - (D) where a patient’s authorization to [exchange](/usc/42/300gg–91.md?p=d-21) information is required by law, easily exchanged pursuant to such authorization.
  - (4) **Rule of construction—** Nothing in this subsection shall be construed to preempt [State](/usc/42/300ii.md?p=8) laws applicable to patient consent for the access of information through a [health information](/usc/42/300jj.md?p=4) [exchange](/usc/42/300gg–91.md?p=d-21) (or other relevant platform) that provide protections to patients that are greater than the protections otherwise provided for under applicable Federal law.
- (d) **Efforts to promote access to health information—** The [National Coordinator](/usc/42/300jj.md?p=11) and the Office for Civil Rights of the Department of Health and Human [Services](/usc/42/201.md?p=a) shall jointly promote patient access to [health information](/usc/42/300jj.md?p=4) in a manner that would ensure that such information is available in a form convenient for the patient, in a reasonable manner, without burdening the [health care provider](/usc/42/300jj.md?p=3) involved.
- (e) **Accessibility of patient records—**
  - (1) **Accessibility and updating of information—**
    - (A) **In general—** The [Secretary](/usc/42/201.md?p=c), in consultation with the [National Coordinator](/usc/42/300jj.md?p=11), shall promote policies that ensure that a patient’s electronic [health information](/usc/42/300jj.md?p=4) is accessible to that patient and the patient’s designees, in a manner that facilitates communication with the patient’s [health care providers](/usc/42/300jj.md?p=3) and other individuals, including researchers, consistent with such patient’s consent.
    - (B) **Updating education on accessing and exchanging personal health information—** To promote awareness that an individual has a right of access to inspect, obtain a copy of, and transmit to a third party a copy of such individual’s protected [health information](/usc/42/300jj.md?p=4) pursuant to the [Health Information](/usc/42/300jj.md?p=4) Portability and Accountability Act, Privacy Rule (subpart E of part [164](/usc/45/164.md) of title 45, Code of Federal [Regulations](/usc/42/201.md?p=d)), the [Director](/usc/42/11851.md?p=5) of the Office for Civil Rights, in consultation with the [National Coordinator](/usc/42/300jj.md?p=11), shall assist individuals and [health care providers](/usc/42/300jj.md?p=3) in understanding a patient’s rights to access and protect personal [health information](/usc/42/300jj.md?p=4) under the Health Insurance Portability and Accountability Act of 1996 (Public Law 104–191), including providing best [practices](/usc/42/17061.md?p=19) for requesting personal [health information](/usc/42/300jj.md?p=4) in a computable format, including using patient portals or third-party applications and common cases when a [provider](/usc/42/299b–21.md?p=8) is permitted to [exchange](/usc/42/300gg–91.md?p=d-21) and provide access to [health information](/usc/42/300jj.md?p=4).”.[^2]
  - (2) **Certifying usability for patients—** In carrying out certification [programs](/usc/42/274l–1.md?p=4) under [section 300jj–11(c)(5) of this title](/usc/42/300jj–11.md?p=c-5), the [National Coordinator](/usc/42/300jj.md?p=11) may require that—
    - (A) the certification criteria support—
      - (i) patient access to their electronic [health information](/usc/42/300jj.md?p=4), including in a single longitudinal format that is easy to understand, secure, and may be updated automatically;
      - (ii) the patient’s ability to electronically communicate patient-reported information (such as family history and medical history); and
      - (iii) patient access to their personal electronic [health information](/usc/42/300jj.md?p=4) for research at the option of the patient; and
    - (B) the [HIT Advisory Committee](/usc/42/300jj.md?p=7) develop and prioritize standards, implementation specifications, and certification criteria required to help support patient access to electronic [health information](/usc/42/300jj.md?p=4), patient usability, and support for technologies that offer patients access to their electronic [health information](/usc/42/300jj.md?p=4) in a single, longitudinal format that is easy to understand, secure, and may be updated automatically.

## Footnotes

[^1]: See References in Text note below.
[^2]: So in original.

## Source credit

(July 1, 1944, ch. 373, title XXX, § 3009, as added Pub. L. 111–5, div. A, title XIII, § 13101, Feb. 17, 2009, 123 Stat. 242; amended Pub. L. 114–255, div. A, title IV, § 4006(a), Dec. 13, 2016, 130 Stat. 1181.)

## Notes

### Editorial Notes

### References in Text

The Social Security Act, referred to in subsec. (a)(2)(A), is act Aug. 14, 1935, ch. 531, 49 Stat. 620. Part C of title XI of the Act is classified generally to part C (§ 1320d et seq.) of subchapter XI of chapter 7 of this title. For complete classification of this Act to the Code, see section 1305 of this title and Tables.

The Health Insurance Portability and Accountability Act of 1996, referred to in subsecs. (a)(2)(A) and (e)(1)(B), is Pub. L. 104–191, Aug. 21, 1996, 110 Stat. 1936. Section 264 of the Act is set out as a note under section 1320d–2 of this title. For complete classification of this Act to the Code, see Short Title of 1996 Amendments note set out under section 201 of this title and Tables.

The Health Information Technology for Economic and Clinical Health Act, referred to in subsec. (a)(2)(A), is title XIII of div. A and title IV of div. B of Pub. L. 111–5, Feb. 17, 2009, 123 Stat. 226, 467, also known as the HITECH Act. Subtitle D of title IV of the Act probably means subtitle D of title XIII of div. A of the Act, which is classified generally to subchapter III (§ 17921 et seq.) of chapter 156 of this title. Title IV of div. B of the Act does not contain a subtitle D. For complete classification of this Act to the Code, see Short Title of 2009 Amendment note set out under section 201 of this title and Tables.

### Amendments

2016—Subsecs. (c) to (e). Pub. L. 114–255 added subsecs. (c) to (e).
