(1) Except for a
small health plan (defined at § 142.103),
each entity designated in § 142.302 must comply with the requirements of this
subpart by [24 months after the effective date of the final rule in the
Federal Register].
(2) A delay in an effective date for using a
standard
transaction described in this part does not delay the effective dates
described in paragraphs (a)(1) and (b) of this section.
(3) The requirements of the security
standard may be
implemented over time. Implementation must be completed by the applicable
effective date.
