§164.302 Applicability.
A covered entity or business associate must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information of a covered entity.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.