ONC SUMMARY OF SELECTED FEDERAL LAWS AND REGULATIONS ADDRESSING CONFIDENTIALITY, PRIVACY AND SECURITY [PDF]
ONC has prepared and posted a working document dated  February 18, 2010 that summarizes federal laws and regulation related to confidentiality, privacy and security. The table is the most recent document on an ONC Web page titled “Privacy and Security and Health Information Technology.” The pdf table lists Federal Law, Citation, General Description, Applicability, Information Covered, and Summary for each item.

ONC requested you ”contact ONC.Request@hhs.gov attention Jonathan Ishee/Privacy Law Table if you have any comments or suggestions related to this document.” They added this disclaimer: “This information was prepared as an educational resource and should not be relied on or construed as legal advice. Use of this table alone will not ensure compliance with applicable Federal and State law.”

Laws
These are the laws listed. See the PDF table for the complete summary.

1. The Privacy Act of 1974
2. The Freedom of Information Act (FOIA) 5 U.S.C. § 552 (2006), amended by OPEN Government Act of 2007, Pub. L. No. 110-175, 121Stat. 2524.
3. Health Insurance Portability and Accountability Act (HIPAA), Privacy Rule (2000)
4. Health Insurance Portability and Accountability Act (HIPAA) Security Rule
5. Health Breach Notification Rule(Federal Trade Commission Rule)
6. Health Breach Notification Rule (Health and Human Services)
7.  SAMHSA: Confidentiality of Substance Abuse Patient Records
8. Medicaid Privacy Requirements
9. Genetic Information Nondiscrimination Act of 2008 (GINA)
10. Clinical Laboratory Improvement Amendments (CLIA) (1988)
11. Federal Food, Drug, and Cosmetic Act (FDCA)
13. Controlled Substances Act (CSA)
14. Federal Policy for the Protection of Human Subjects (Common Rule)
15. Statutory Authority for Certificates of Confidentiality
16. AHRQ Confidentiality Provisions
17. CDC Confidentiality Provisions
18. SAMHSA: Confidentiality Provisions for Data Collection and Survey Information
19. Patient Safety and Quality Improvement Act of 200(Patient Safety Act)
20. Employee Retirement Income Security Act of 1974(ERISA)
21. Individuals with Disabilities Education Improvement Act (2004)
22. Family Educational Rights and Privacy Act (1974)
23. Protection of Pupil Rights Amendment (2002)
24. Right to Financial Privacy Act (1978)
25. Financial Modernization Act (Gramm-Leach-Bliley Act 1999) and Privacy of Consumer Financial Information Regulations
26. Fair and Accurate Credit Transaction Act (FACTA) (2003)
27. Fair Credit Reporting Act (FCRA) (1970)
28. Fair Credit Reporting Medical Information Regulations (2005)
29. Fair Debt Collection Practices Act (Revised 2006)
30. Children’s Online Privacy Protection Act (1998)and accompanying rule
31. Cable Communications Policy Act (1984)
32. Telephone Consumer Protection Act (1991)
33. Video Privacy Protection Act (1988)
34. Drivers Privacy Protection Act (1994)
35. REAL ID Act (2005)
36. Employee Polygraph Protection Act (1988)
37. Federal Trade Commission Act (FTCA) (1914)
38. Federal Information Security Management Act (FISMA) (2002)
39. Electronic Signatures in Global and National Commerce Act (2000)
40. Telecommunications Act (1996)
41. Stored Communications Act
42. Electronic Communications Privacy Act (1986)
43. The PATRIOT Act(2001)
44. Foreign Intelligence Surveillance Act (FISA) (1978)
45. Privacy Protection Act (1980)
46. Communications Assistance for Law Enforcement Act (1994)
47. Confidential Information Protection and Statistical Efficiency Act of 2002
48. Computer Fraud and Abuse Act
49. Federal Trade Commission Identify Theft Rule