Health Information Technology for Economic and Clinical Health Act, Subtitle D (Privacy)

HITECH's privacy subtitle created the federal breach notification duty for HIPAA covered entities and business associates, made business associates directly subject to HIPAA security and penalty provisions, and raised HIPAA penalties. A 2021 amendment requires HHS to consider an entity's recognized security practices when setting fines and audit outcomes.