ABSTRACT

Security Rule was published in the Federal Register on

February 20, 2003. Covered entities were required to

implement reasonable administrative, physical, and tech-

nical safeguards to protect the confidentiality, integrity, and

availability of electronic protected health information by

April 20, 2005 (2006 for small health plans).