Section § 164.308(a)(2)Assigned security responsibility

(2) Standard: Assigned security responsibility. Identify the security official who is responsible for the development and implementation of the policies and procedures required by this subpart for the covered entity or business associate.

HIPAA, the United States rules protecting health information, § 164.308(a)(2)

Text: 45 CFR Part 164, from the Electronic Code of Federal Regulations (eCFR) as it stood on 6 October 2026.