HITECH
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
HITECH - The Health Information Technology for Economic and Clinical Health Act; the FTC shares breach-notification authority with HHS for personal health record providers.
In the CIPP/US body of knowledge, HITECH comes up under Chapter 5: Federal and State Regulators and Enforcement of Privacy Law.
HITECH in context
- Weaknesses: ==no single DPA, plus gaps and overlaps== - illustrated by HITECH filling a gap and HIPAA/FTC overlap. (Sectoral Model (United States))
- Beyond Section 5 the FTC enforces ==COPPA== (children under 13, parental consent), shares ==HITECH== breach authority with HHS, has historic ==FCRA/FACTA== authority (now largely CFPB), and shares ==CAN-SPAM== with the FCC. (Additional FTC Authority: COPPA, HITECH, FCRA, CAN-SPAM)
- Before HITECH they were bound only by contract; ==after HITECH, HIPAA privacy and security rules apply directly to business associates==, in addition to the required business associate agreement. (Business Associates and BAAs)
Where HITECH is covered in the CIPP/US study notes
Related terms
Test yourself on HITECH
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.