1. United States Public Law, 1996, Health Insurance Portability and Accountability Act of 1996 (HIPAA) Pub.L. 104–191 and the HIPAA Privacy Rule 2003. 45 CFR Part 160 and Part 16 Subparts A and E.
2. United States Public Law, 2009, Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009. Section 13410(d).
3. United States Public Law, 1981, Federal Policy for the Protection of Human Subjects (‘Common Rule’). 45 CFR part 46