150.207—Procedure for determining that a State fails to substantially enforce HIPAA requirements.
Sections 150.209 through 150.219 describe the procedures CMS follows to determine whether a State is substantially enforcing HIPAA requirements.