1. U.S. Department of Health and Human Services, "Anthem Pays OCR $16 Million in Record HIPAA Settlement Following Largest U.S. Health Data Breach in History." October 15, 2018. https://www.hhs.gov/about/news/2018/10/15/anthem-pays-ocr-16-million-record-hipaa-settlement-following-largest-health-data-breach-history.html (accessed July 5, 2020).
2. Ponemon Institute, "Fifth Annual Study on Medical Identity Theft." February 2015. https://static.nationwide.com/static/2014_Medical_ID_Theft_Study.pdf?r=65 (accessed July 5, 2020).
3. CBS News, “Cancer Patient Catches ID Thief,” November 6, 2004. https://www.cbsnews.com/news/cancer-patient-catches-id-thief/ (accessed March 1, 2020).
4. U.S. Department of Justice, “Leesburg Woman Sentenced To 48 Months In Prison For Aggravated Identity Theft And Wire Fraud,” May 19, 2020. https://www.justice.gov/usao-mdfl/pr/leesburg-woman-sentenced-48-months-prison-aggravated-identity-theft-and-wire-fraud (accessed July 5, 2020).
5. National Library of Medicine, “Greek Medicine: The Hippocratic Oath,” Translated by Michael North, 2002. http://www.nlm.nih.gov/hmd/greek/greek_oath.html (accessed March 1, 2020).
6. Drug Abuse Prevention, Treatment, and Rehabilitation Act (1980), U.S. Code Vol. 42, sec. 290dd-2 (2020).
7. Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act), Pub. L. No. 111-5, 123 Stat. 226, codified at U.S. Code Vol. 42, sec. 300jj et seq., and sec. 17901 et seq. (2018).
8. Consolidated Omnibus Budget Reconciliation Act (1986), Pub. L. No. 99-272, 100 Stat. 82 (1986).
9. CNBC, “Consumer DNA Testing Has Hit a Lull—Here’s How It Could Capture the Next Wave of Users,” August 25, 2019. https://www.cnbc.com/2019/08/25/dna-tests-from-companies-like-23andme-ancestry-see-sales-slowdown.html (accessed March 1, 2020).
10. Health Insurance Portability and Accountability Act (1996), Pub. L. No. 104-191, sec. 261.
11. Genetic Information Nondiscrimination Act of 2008 (GINA), Pub. L. No. 110-233, 122 Stat. 881 (2008).
12. Code of Federal Regulations, Title 45, sec. 160.103.
13. Code of Federal Regulations, Title 45, sec. 160.103.
14. U.S. Code Vol. 42, sec. 1320d.
15. Code of Federal Regulations, Title 45, sec. 164.104(b).
16. Federal Register 65, No. 250 at 82463 (background information).
17. Code of Federal Regulations, Title 45, sec. 164.524(b).
18. Code of Federal Regulations, Title 45, sec. 164.524(d).
19. Code of Federal Regulations, Title 45, sec. 164.502(a)(2).
20. Code of Federal Regulations, Title 45, sec.164.502.
21. Code of Federal Regulations, Title 45, sec. 164.506(c).
22. Code of Federal Regulations, Title 45, sec. 164.501.
23. Code of Federal Regulations, Title 45, sec. 164.501.
24. Code of Federal Regulations, Title 45, sec. 164.501.
25. Code of Federal Regulations, Title 45, sec. 164.506(b).
26. Code of Federal Regulations, Title 45, sec. 164.510.
27. Code of Federal Regulations, Title 45, sec. 164.512.
28. Code of Federal Regulations, Title 45, sec. 164.512(b).
29. Code of Federal Regulations, Title 45, sec. 164.512(b).
30. Code of Federal Regulations, Title 45, sec. 164.512(c).
31. Code of Federal Regulations, Title 45, sec. 164.512(a).
32. Code of Federal Regulations, Title 45, sec. 164.514(e)(2).
33. Code of Federal Regulations, Title 45, sec. 164.514(e)(4).
34. Code of Federal Regulations, Title 45, sec. 164.508.
35. Code of Federal Regulations, Title 45, sec. 164.508(c)(1).
36. Code of Federal Regulations, Title 45, sec. 165-502(b).
37. Code of Federal Regulations, Title 45, sec. 165-502(b)(2).
38. Code of Federal Regulations, Title 45, sec. 164.526.
39. Code of Federal Regulations, Title 45, sec. 164.526(b)(2).
40. Code of Federal Regulations, Title 45, sec. 164.526(d).
41. Code of Federal Regulations, Title 45, sec. 164.528.
42. Code of Federal Regulations, Title 45, sec. 164.528(c)(2).
43. Code of Federal Regulations, Title 45, sec. 164.528(d).
44. HITECH Act, sec. 13405(c).
45. Code of Federal Regulations, Title 45, sec. 164.520.
46. Code of Federal Regulations, Title 45, sec. 164.520(c).
47. Code of Federal Regulations, Title 45, sec. 164.530.
48. Code of Federal Regulations, Title 45, sec. 164.530.
49. Code of Federal Regulations, Title 45, sec. 164.530(f).
50. HITECH Act, sec. 13402.
51. Fed. Register No. 78, 5642-43 (January 25, 2013).
52. Code of Federal Regulations, Title 45, sec. 164.404.
53. Code of Federal Regulations, Title 45, sec. 164.404.
54. Code of Federal Regulations, Title 45, sec. 164.404.
55. Code of Federal Regulations, Title 45, sec. 164.408.
56. Code of Federal Regulations, Title 45, sec. 164.306.
57. Code of Federal Regulations, Title 45, sec. 164.316(b).
58. Code of Federal Regulations, Title 45, sec. 164.306.
59. Code of Federal Regulations, Title 45, sec. 164.306(d).
60. Code of Federal Regulations, Title 45, sec. 164.304.
61. Code of Federal Regulations, Title 45, sec. 164.308.
62. Code of Federal Regulations, Title 45, sec. 164.304.
63. Code of Federal Regulations, Title 45, sec. 164.304.
64. Code of Federal Regulations, Title 45, sec. 164.310.
65. Code of Federal Regulations, Title 45, sec. 164.304.
66. Code of Federal Regulations, Title 45, sec. 164.304.
67. Code of Federal Regulations, Title 45, sec. 164.312.
68. U.S. Department of Health & Human Services, “Enforcement Results by Year,” April 3, 2019. https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/data/enforcement-results-by-year/index.html (accessed March 1, 2020).
69. Federal Civil Penalties Inflation Adjustment Act Improvements Act of 2015, enacted as part of the Bipartisan Budget Act of 2015, Public Law 114-74, section 701, 129 Stat. 599 (Nov. 2, 2015).
70. Code of Federal Regulations, Title 45, sec. 160.414.
71. Health Facilities Data Breach, California Health and Safety Code sec. 1280.15.