security-rule

HIPAA Security Rule

Primary-source orientation to the administrative, physical, and technical safeguard framework.

Current requirement Identifier 45-CFR-164-SUBPART-C Version 1.0

The Security Rule is codified at 45 CFR Part 164, Subpart C. It addresses safeguards for electronic protected health information and uses standards and implementation specifications.

Read the regulation itself before turning to implementation guidance. An organization’s documented risk analysis, chosen safeguards, and ongoing review should reflect its own environment and risks.

Authority and source

Authority: Primary source
Citation: 45 CFR Part 164
Publisher: Office of the Federal Register
Source identifier: 45-CFR-164
Source status: verified

Open primary source

Change and publication history

Initial reviewed publication — Sep 5, 2026