The executive office, in consultation with the institute, shall ensure that the statewide health information exchange and associated electronic health records systems comply with all state and federal privacy requirements, including those imposed by the Health Insurance Portability and Accountability Act of 1996, P.L. 104–191, the American Recovery and Reinvestment Act of 2009, P.L. 111–5, 42 C.F.R. §§ 2.11 et seq. and 45 C.F.R. §§ 160, 162 and 164.
Massachusetts Legal Code