OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.514

164.514(e)(4)(i)

paragraph (action item)

Agreement required. A covered entity may use or disclose a limited data set under paragraph (e)(1) of this section only if the covered entity obtains satisfactory assurance, in the form of a data use agreement that meets the requirements of this section, that the limited data set recipient will only use or disclose the protected health information for limited purposes.

164.514 Other requirements relating to uses and disclosures of protected health information.

Related Frameworks

1 mapping across 2 frameworks
SCF1 mapping
DCH-03.1Disclosure of Information
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (51) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-22Publicly Accessible Content
1.00
AT-1Policy and Procedures
1.00
AT-2Literacy Training and Awareness
1.00
AT-3(5)Processing Personally Identifiable Information
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00
CP-2Contingency Plan
1.00

+41 more (top 10 by confidence shown)

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.