§164.302 Applicability.
A covered entity must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information.
Make sure your Business Associate Agreement is up to date.