HITECH Act
What is HITECH Act?
The Health Information Technology for Economic and Clinical Health Act (HITECH Act) is a US federal statute enacted 17 February 2009 as Title XIII of the AMERICAN RECOVERY AND REINVESTMENT ACT (ARRA, Public Law 111-5, Stimulus Act). HITECH represents the most significant amendment to HIPAA since enactment. It comprises 22 controls organised across 2 domains, and applies in the United States.
How HITECH Act maps to other frameworks
All 22 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 2 domains HITECH Act groups its controls into
Frameworks that share controls with HITECH Act
Each of these has at least one control mapped to a control in HITECH Act. The number is how many HITECH Act controls are shared, counted from the mapping graph.
Privacy Act 1988 (Australia)
4 shared controlsLaw No. 172-13 on the Protection of Personal Data
4 shared controlsIndia DPDP Act
4 shared controlsBahrain PDPL
4 shared controlsDAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
4 shared controlsAPPI
4 shared controlsPakistan Personal Data Protection Bill 2023
3 shared controlsUS Consumer Product Safety Commission (CPSC) - Connected Product Safety
3 shared controlsTraining on frameworks that overlap HITECH Act
There is no course on HITECH Act itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.
Where HITECH Act overlaps with the standards you already hold
What an auditor will ask you for
All 11 HITECH Act controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the HITECH Act evidence request listWhat HITECH Act means in your sector
What HITECH Act means for your job
Questions people ask about HITECH Act
What is HITECH Act?
How many controls does HITECH Act have?
Where does HITECH Act apply?
What frameworks does HITECH Act map to?
How do I get started with HITECH Act compliance?
Query HITECH Act programmatically
HITECH Act, its 22 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
HITECH Act API reference and MCP config →What HITECH Act requires, control by control
Each page carries the requirement text for one HITECH Act control and what an assessor expects to see as evidence.
- HITECH-COORD-HIPAA-PRIVACY-SECURITY-CURES-ONC HITECH Coordination with HIPAA Privacy Rule + HIPAA Security Rule (Verified Separately) + 21st Century Cures Act + ONC
- HITECH-ENFORCEMENT-CMP-TIERS-STATEAGS-OCR HITECH 4-Tier Civil Monetary Penalty Structure, State AGs Enforcement and HHS OCR Settlements
- HITECH-SCOPE-ARRA-XIII-42USC-CH156-SUBTITLES HITECH Act Statutory Scope, ARRA Title XIII Origin and 42 USC Chapter 156 Structure (Subtitles A through D)
- HITECH-SUBTITLEA-ONC-HIT-STANDARDS-EHR-MU-PI HITECH Subtitle A - ONC, HIT Standards Committee, EHR Certification, Meaningful Use / Promoting Interoperability
- HITECH-SUBTITLED-BREACH-NOTIFICATION-BA-DIRECT-LIABILITY HITECH Subtitle D - Breach Notification Rule (45 CFR Part 164 Subpart D), Business Associate Direct Liability, Subcontractors
- HITECH-SUBTITLED-STRENGTHINDIVIDUALRIGHTS HITECH Subtitle D - Strengthened Individual Rights (Electronic Access, Accounting of Disclosures, Restrictions, Sale Prohibition)
How ready are you for HITECH Act?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.