--- title: "42 U.S.C. 1320d–3 HIPAA: Timetables for adoption of standards" canonical: "https://dposchool.com/hipaa/section/1320d-3" source: "https://uscode.house.gov/us/usc/119-136/t42/s1320d-3/" source_note: "Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 45, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-22" language: "en" publisher: "DPO School" --- 42 U.S.C. 1320d–3 HIPAA · Chapter 7: SOCIAL SECURITY # 42 U.S.C. 1320d–3 HIPAA: Timetables for adoption of standards United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026. ## Official text ### 42 U.S.C. 1320d–3(a) **(a)** Initial standards The Secretary shall carry out section 1320d–2 of this title not later than 18 months after August 21, 1996, except that standards relating to claims attachments shall be adopted not later than 30 months after August 21, 1996. ### 42 U.S.C. 1320d–3(b) **(b)** Additions and modifications to standards #### 42 U.S.C. 1320d–3(b)(1) **(1)** In general Except as provided in paragraph (2), the Secretary shall review the standards adopted under section 1320d–2 of this title, and shall adopt modifications to the standards (including additions to the standards), as determined appropriate, but not more frequently than once every 12 months. Any addition or modification to a standard shall be completed in a manner which minimizes the disruption and cost of compliance. #### 42 U.S.C. 1320d–3(b)(2) **(2)** Special rules ##### 42 U.S.C. 1320d–3(b)(2)(A) **(A)** First 12-month period Except with respect to additions and modifications to code sets under subparagraph (B), the Secretary may not adopt any modification to a standard adopted under this part during the 12-month period beginning on the date the standard is initially adopted, unless the Secretary determines that the modification is necessary in order to permit compliance with the standard. ##### 42 U.S.C. 1320d–3(b)(2)(B) **(B)** Additions and modifications to code sets ###### 42 U.S.C. 1320d–3(b)(2)(B)(i) **(i)** In general The Secretary shall ensure that procedures exist for the routine maintenance, testing, enhancement, and expansion of code sets. ###### 42 U.S.C. 1320d–3(b)(2)(B)(ii) **(ii)** Additional rules If a code set is modified under this subsection, the modified code set shall include instructions on how data elements of health information that were encoded prior to the modification may be converted or translated so as to preserve the informational value of the data elements that existed before the modification. Any modification to a code set under this subsection shall be implemented in a manner that minimizes the disruption and cost of complying with such modification. ## Source Source: United States Code, title 42, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source credit: ( Aug. 14, 1935, ch. 531 , title XI, § 1174, as added Pub. L. 104-191, title II, § 262(a) , Aug. 21, 1996 , 110 Stat. 2026 .) [42 U.S.C. 1320d–3 on the Office of the Law Revision Counsel](https://uscode.house.gov/us/usc/119-136/t42/s1320d-3/) United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [HIPAA Navigator](https://dposchool.com/hipaa) / 42 U.S.C. 1320d–3 Previous: [42 U.S.C. 1320d–2 HIPAA: Standards for information transactions and data elements](https://dposchool.com/hipaa/section/1320d-2) Next: [42 U.S.C. 1320d–4 HIPAA: Requirements](https://dposchool.com/hipaa/section/1320d-4) ## For AI agents - Machine-readable index: https://dposchool.com/hipaa/llms.txt - JSON API: https://dposchool.com/hipaa/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents