> Disclaimer: This content is for educational and reference purposes for software builders only. It does not constitute medical, legal, financial, or regulatory advice. Consult a qualified professional before making decisions based on this content.
HIPAA and Federal Regulatory Sources
1. HHS - Health Insurance Portability and Accountability Act (HIPAA) Security Rule (45 CFR Part 164, Subpart C) https://www.hhs.gov/hipaa/for-professionals/security/index.html
2. HHS - HIPAA and Telehealth - Guidance for Covered Entities and Business Associates https://www.hhs.gov/hipaa/for-professionals/special-topics/telehealth/index.html
3. HHS - COVID-19 and HIPAA: Guidance on Business Associate Agreements and Telehealth https://www.hhs.gov/hipaa/for-professionals/special-topics/emergency-preparedness/notification-enforcement-discretion-telehealth/index.html
4. DEA - Electronic Prescribing of Controlled Substances (EPCS) - 21 CFR Part 1311 https://www.ecfr.gov/current/title-21/chapter-II/part-1311
5. DEA - Telemedicine Prescribing of Controlled Substances (Ryan Haight Act) https://www.dea.gov/diversion/telemedicine-dea-registration
6. CMS - Medicare Telehealth Services - Coverage and Billing https://www.cms.gov/Medicare/Medicare-General-Information/Telehealth
7. FTC Act - Section 5 (Unfair or Deceptive Acts) applicable to telehealth data practices https://www.ftc.gov/legal-library/browse/statutes/federal-trade-commission-act
Interoperability and Identity Standards
8. NIST SP 800-63A - Digital Identity Guidelines: Enrollment and Identity Proofing https://pages.nist.gov/800-63-3/sp800-63a.html
9. NIST SP 800-63B - Digital Identity Guidelines: Authentication and Lifecycle Management https://pages.nist.gov/800-63-3/sp800-63b.html
10. HL7 FHIR R4 - Official Specification https://hl7.org/fhir/R4/
11. SMART on FHIR - Authorization Framework Specification https://smarthealthit.org/
12. ONC - 21st Century Cures Act: Interoperability, Information Blocking, and ONC Health IT Certification Program https://www.healthit.gov/topic/oncs-cures-act-final-rule
Interstate Licensing and Telehealth Laws
13. IMLC - Interstate Medical Licensure Compact https://imlcc.org/
14. FSMB - Federation of State Medical Boards - DocInfo Provider Verification https://www.fsmb.org/policy/advocacy-policy/telehealth/
15. NCSL - National Conference of State Legislatures - Telehealth Policy https://www.ncsl.org/health/state-telehealth-laws-and-reimbursement-policies-report
Technical Standards
16. IETF RFC 5764 - DTLS Extension to Establish Keys for SRTP https://datatracker.ietf.org/doc/html/rfc5764
17. W3C - WebRTC 1.0: Real-Time Communication Between Browsers https://www.w3.org/TR/webrtc/
18. WCAG 2.1 - Web Content Accessibility Guidelines https://www.w3.org/TR/WCAG21/