Sec. 13112. Application to Private Entities.
Each agency (as defined in such Executive Order issued on August 22, 2006, relating to promoting quality and efficient health care in Federal government administered or sponsored health care programs) shall require in contracts or agreements with health care providers, health plans, or health insurance issuers that as each provider, plan, or issuer implements, acquires, or upgrades health information technology systems, it shall utilize, where available, health information technology systems and products that meet standards and implementation specifications adopted under section 3004 of the Public Health Service Act, as added by section 13101.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.