§164.106 Relationship to other parts.
In complying with the requirements of this part, covered entities and, where provided, business associates, are required to comply with the applicable provisions of parts 160 and 162 of this subchapter.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.