42 U.S.C. 1320d HIPAA · Chapter 7: SOCIAL SECURITY
42 U.S.C. 1320d HIPAA: Definitions
United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.
Official text
For purposes of this part:
Code set
The term “code set” means any set of codes used for encoding data elements, such as tables of terms, medical concepts, medical diagnostic codes, or medical procedure codes.
Health care clearinghouse
The term “health care clearinghouse” means a public or private entity that processes or facilitates the processing of nonstandard data elements of health information into standard data elements.
Health care provider
The term “health care provider” includes a provider of services (as defined in section 1395x(u) of this title), a provider of medical or other health services (as defined in section 1395x(s) of this title), and any other person furnishing health care services or supplies.
Health information
The term “health information” means any information, whether oral or recorded in any form or medium, that—
is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; and
relates to the past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care to an individual.
Health plan
The term “health plan” means an individual or group plan that provides, or pays the cost of, medical care (as such term is defined in section 300gg–91 of this title). Such term includes the following, and any combination thereof:
A group health plan (as defined in section 300gg–91(a) of this title), but only if the plan—
has 50 or more participants (as defined in section 1002(7) of title 29); or
is administered by an entity other than the employer who established and maintains the plan.
A health insurance issuer (as defined in section 300gg–91(b) of this title).
A health maintenance organization (as defined in section 300gg–91(b) of this title).
Parts 1 A, B, C, or D of the Medicare program under subchapter XVIII.
The medicaid program under subchapter XIX.
A Medicare supplemental policy (as defined in section 1395ss(g)(1) of this title).
A long-term care policy, including a nursing home fixed indemnity policy (unless the Secretary determines that such a policy does not provide sufficiently comprehensive coverage of a benefit so that the policy should be treated as a health plan).
An employee welfare benefit plan or any other arrangement which is established or maintained for the purpose of offering or providing health benefits to the employees of 2 or more employers.
The health care program for active military personnel under title 10.
The veterans health care program under chapter 17 of title 38.
The Civilian Health and Medical Program of the Uniformed Services (CHAMPUS), as defined in section 1072(4) of title 10.
The Indian health service program under the Indian Health Care Improvement Act (25 U.S.C. 1601 et seq.).
The Federal Employees Health Benefit Plan under chapter 89 of title 5.
Individually identifiable health information
The term “individually identifiable health information” means any information, including demographic information collected from an individual, that—
is created or received by a health care provider, health plan, employer, or health care clearinghouse; and
relates to the past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care to an individual, and—
identifies the individual; or
with respect to which there is a reasonable basis to believe that the information can be used to identify the individual.
Standard
The term “standard”, when used with reference to a data element of health information or a transaction referred to in section 1320d–2(a)(1) of this title, means any such data element or transaction that meets each of the standards and implementation specifications adopted or established by the Secretary with respect to the data element or transaction under sections 1320d–1 through 1320d–3 of this title.
Standard setting organization
The term “standard setting organization” means a standard setting organization accredited by the American National Standards Institute, including the National Council for Prescription Drug Programs, that develops standards for information transactions, data elements, or any other standard that is necessary to, or will facilitate, the implementation of this part.
Operating rules
The term “operating rules” means the necessary business rules and guidelines for the electronic exchange of information that are not defined by a standard or its implementation specifications as adopted for purposes of this part.
Notes in the official text
- (1) So in original. Probably should be “Part”.
Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced.
Source credit: ( Aug. 14, 1935, ch. 531 , title XI, § 1171, as added Pub. L. 104-191, title II, § 262(a) , Aug. 21, 1996 , 110 Stat. 2021 ; amended Pub. L. 107-105, § 4 , Dec. 27, 2001 , 115 Stat. 1007 ; Pub. L. 111-5, div. A, title XIII, § 13102 , Feb. 17, 2009 , 123 Stat. 242 ; Pub. L. 111-148, title I, § 1104(b)(1) , Mar. 23, 2010 , 124 Stat. 146 .)
42 U.S.C. 1320d on the Office of the Law Revision Counsel
United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.
This is reference material, not legal advice.