DPO SchoolDPO School

45 CFR 160.104 HIPAA · Part 160: GENERAL ADMINISTRATIVE REQUIREMENTS · Subpart A: General Provisions

45 CFR 160.104 HIPAA: Modifications

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

Official text

Except as provided in paragraph (b) of this section, the Secretary may adopt a modification to a standard or implementation specification adopted under this subchapter no more frequently than once every 12 months.
The Secretary may adopt a modification at any time during the first year after the standard or implementation specification is initially adopted, if the Secretary determines that the modification is necessary to permit compliance with the standard or implementation specification.
The Secretary will establish the compliance date for any standard or implementation specification modified under this section.
The compliance date for a modification is no earlier than 180 days after the effective date of the final rule in which the Secretary adopts the modification.
The Secretary may consider the extent of the modification and the time needed to comply with the modification in determining the compliance date for the modification.
The Secretary may extend the compliance date for small health plans, as the Secretary determines is appropriate.

Source: Electronic Code of Federal Regulations (eCFR), title 45, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR.

Source credit: [65 FR 82798, Dec. 28, 2000, as amended at 67 FR 38019, May 31, 2002]

45 CFR 160.104 on eCFR

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

This is reference material, not legal advice.