SUBPART B—CMS Enforcement Processes for Determining Whether States Are Failing To Substantially Enforce HIPAA Requirements (§150.201 to §150.221)
- 150.201—State enforcement.
- 150.203—Circumstances requiring CMS enforcement.
- 150.205—Sources of information triggering an investigation of State enforcement.
- 150.207—Procedure for determining that a State fails to substantially enforce HIPAA requirements.
- 150.209—Verification of exhaustion of remedies and contact with State officials.
- 150.211—Notice to the State.
- 150.213—Form and content of notice.
- 150.215—Extension for good cause.
- 150.217—Preliminary determination.
- 150.219—Final determination.
- 150.221—Transition to State enforcement.