Standards for privacy of individually identifiable health information, final rule. Federal Registry (2002)
45 CRF, Parts 160 and 164