45 CFR § 160.103 - Definitions

Publisher

Legal Information Institute (Cornell Law School), reproducing the eCFR

URL

https://www.law.cornell.edu/cfr/text/45/160.103

Published

unknown

Updated

unknown

Accessed

2026-10-01

HTTP status

200

License

US federal regulation text is public domain; LII page layout is LII's; public-domain regulatory text; short excerpts and locators only for page furniture

Source notes citing this source

• The business associate definition expressly includes a person that provides data transmission services with respect to PHI to a covered entity and that requires access on a routine basis to that PHI. in context
• Under 45 CFR 160.103 a business associate includes a person who on behalf of a covered entity creates receives maintains or transmits protected health information for a regulated function or activity. in context
• Call recordings voicemail and transcripts held by a covered entity or its business associate that contain health information about an identifiable caller fall within the PHI definition because the definition is not limited to written or structured records. inferred in context
• Protected health information is individually identifiable health information that is transmitted by electronic media maintained in electronic media or transmitted or maintained in any other form or medium. in context

Cite this source record

APA

WarmTransfer. (2026, October 1). 45 CFR § 160.103 - Definitions. WarmTransfer. https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-160-103

BibTeX

@misc{warmtransfer-cornell-lii-45-cfr-160-103,
  title  = {45 CFR § 160.103 - Definitions},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-160-103},
  note   = {Legal Information Institute (Cornell Law School), reproducing the eCFR, accessed 2026-10-01}
}