# 45 CFR § 164.104: Applicability

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/ecfr-45-164.104

## Section

- **Citation:** 45 CFR § 164.104
- **Heading:** Applicability
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** September 22, 2026
- **Source:** Publisher's official text
- **Location:** Title 45—Public Welfare > SUBTITLE A—Department of Health and Human Services > SUBCHAPTER C—ADMINISTRATIVE DATA STANDARDS AND RELATED REQUIREMENTS > PART 164—SECURITY AND PRIVACY > Subpart A—General Provisions

## Text

(a) Except as otherwise provided, the standards, requirements, and implementation specifications adopted under this part apply to the following entities:
(1) A health plan.
(2) A health care clearinghouse.
(3) A health care provider who transmits any health information in electronic form in connection with a transaction covered by this subchapter.
(b) Where provided, the standards, requirements, and implementation specifications adopted under this part apply to a business associate.
[68 FR 8375, Feb. 20, 2003, as amended at 78 FR 5692, Jan. 25, 2013]

## Nearby sections

- [45 CFR § 164.102 § 164.102 Statutory basis.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.102.md)
- [45 CFR § 164.103 § 164.103 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.103.md)
- [45 CFR § 164.104 § 164.104 Applicability.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.104.md)
- [45 CFR § 164.105 § 164.105 Organizational requirements.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.105.md)
- [45 CFR § 164.106 § 164.106 Relationship to other parts.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.106.md)
- [45 CFR § 164.302 § 164.302 Applicability.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.302.md)
- [45 CFR § 164.304 § 164.304 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.304.md)
- [45 CFR § 164.306 § 164.306 Security standards: General rules.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.306.md)
- [45 CFR § 164.308 § 164.308 Administrative safeguards.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.308.md)
- [45 CFR § 164.310 § 164.310 Physical safeguards.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.310.md)
- [45 CFR § 164.312 § 164.312 Technical safeguards.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.312.md)
- [45 CFR § 164.314 § 164.314 Organizational requirements.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.314.md)
- [45 CFR § 164.316 § 164.316 Policies and procedures and documentation requirements.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.316.md)
- [45 CFR § 164.318 § 164.318 Compliance dates for the initial implementation of the security standards.](https://www.frixlaw.com/law-library/statutes/ecfr-45-164.318.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-45-164.104. Check the current official text before relying on it. Not legal advice.