STIGViewer Support

164.524(c)(2)(ii)

paragraph (action item)

Notwithstanding paragraph (c)(2)(i) of this section, if the protected health information that is the subject of a request for access is maintained in one or more designated record sets electronically and if the individual requests an electronic copy of such information, the covered entity must provide the individual with access to the protected health information in the electronic form and format requested by the individual, if it is readily producible in such form and format; or, if not, in a readable electronic form and format as agreed to by the covered entity and the individual.

164.524 Access of individuals to protected health information.

Related Frameworks

1 mapping across 2 frameworks
SCF1 mapping
PRI-06.6Data Portability
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (6) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

PT-1Policy and Procedures
1.00
SC-1Policy and Procedures
1.00
SI-1Policy and Procedures
1.00
SA-15(5)Attack Surface Reduction
0.50
SA-8Security and Privacy Engineering Principles
0.50
SC-7(18)Fail Secure
0.50

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.