Sec. 3006. Voluntary Application and Use of Adopted Standards and Implementation Specifications by Private Entities.
(a) IN GENERAL.—Except as provided under section 13112 of the HITECH Act, nothing in such Act or in the amendments made by such Act shall be construed—
(1) to require a private entity to adopt or comply with a standard or implementation specification adopted under section 3004; or
(2) to provide a Federal agency authority, other than the authority such agency may have under other provisions of law, to require a private entity to comply with such a standard or implementation specification.
(b) RULE OF CONSTRUCTION.—Nothing in this subtitle shall be construed to require that a private entity that enters into a contract with the Federal Government apply or use the standards and implementation specifications adopted under section 3004 with respect to activities not related to the contract.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.