HITECH Act
What is HITECH Act?
The Health Information Technology for Economic and Clinical Health Act (HITECH Act) is a US federal statute enacted 17 February 2009 as Title XIII of the AMERICAN RECOVERY AND REINVESTMENT ACT (ARRA, Public Law 111-5, Stimulus Act). HITECH represents the most significant amendment to HIPAA since enactment. It comprises 11 controls organised across 7 domains, and applies in the United States.
How HITECH Act maps to other frameworks
All 11 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 7 domains HITECH Act groups its controls into
Where HITECH Act overlaps with the standards you already hold
What HITECH Act means in your sector
What HITECH Act means for your job
Questions people ask about HITECH Act
What is HITECH Act?
How many controls does HITECH Act have?
Where does HITECH Act apply?
What frameworks does HITECH Act map to?
How do I get started with HITECH Act compliance?
Query HITECH Act programmatically
HITECH Act, its 11 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
HITECH Act API reference and MCP config →What HITECH Act requires, control by control
Each page carries the requirement text for one HITECH Act control and what an assessor expects to see as evidence.
- HITECH-COORD-HIPAA-PRIVACY-SECURITY-CURES-ONC HITECH Coordination with HIPAA Privacy Rule + HIPAA Security Rule (Verified Separately) + 21st Century Cures Act + ONC
- HITECH-ENFORCEMENT-CMP-TIERS-STATEAGS-OCR HITECH 4-Tier Civil Monetary Penalty Structure, State AGs Enforcement and HHS OCR Settlements
- HITECH-SCOPE-ARRA-XIII-42USC-CH156-SUBTITLES HITECH Act Statutory Scope, ARRA Title XIII Origin and 42 USC Chapter 156 Structure (Subtitles A through D)
- HITECH-SUBTITLEA-ONC-HIT-STANDARDS-EHR-MU-PI HITECH Subtitle A - ONC, HIT Standards Committee, EHR Certification, Meaningful Use / Promoting Interoperability
- HITECH-SUBTITLED-BREACH-NOTIFICATION-BA-DIRECT-LIABILITY HITECH Subtitle D - Breach Notification Rule (45 CFR Part 164 Subpart D), Business Associate Direct Liability, Subcontractors
- HITECH-SUBTITLED-STRENGTHINDIVIDUALRIGHTS HITECH Subtitle D - Strengthened Individual Rights (Electronic Access, Accounting of Disclosures, Restrictions, Sale Prohibition)
How ready are you for HITECH Act?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.