HsiaoC. J.HingE. S., “Use and Characteristics of Electronic Health Record Systems Among Office-Based Physician Practices: United States, 2001–2013,” available at <http://www.cdc.gov/nchs/data/databriefs/db143.pdf>(last visited April 25, 2014).
2.
Id.
3.
45 C.F.R. Parts 160,164 (2013).
4.
45 C.F.R. § 164.502(b)(1) (2013).
5.
Id.
6.
Standards for Privacy of Individually Identifiable Information, 67Fed. Reg. 53181, 53195 (amending 45 C.F.R. Parts 160 and 164).
7.
45 C.F.R. § 164.502(b)(1) (2013).
8.
45 C.F.R. § 164.502(b)(2)(i)-(vi) (2013).
9.
Id.
10.
45 C.F.R. § 164.514(d) (2013).
11.
Id.
12.
45 C.F.R. § 164.501 (2013).
13.
U.S. Department of Health & Human Services, Health Information Privacy, “Top Five Issues in Investigated Cases Closed with Corrective Actions, by Calendar Year,” available at <http://www.hhs.gov/ocr/privacy/hipaa/enforcement/data/top5issues.html>(last visited April 25, 2014).
National Committee on Vital and Health Statistics, Letter to Secretary Kathleen Sebelius on Recommendations Regarding Sensitive Health Information (November 10, 2010), available at <www.ncvhs.hhs.gov/1011101t.pdf>(last accessed February 16, 2014).