A covered entity must comply with the applicable standards, implementation specifications, and requirements of this subpart with respect to electronic protected health information.
