Any covered entity or business associate that is subject to and in compliance with the privacy and security standards for the protection of electronic personal health information established under the Health Insurance Portability and Accountability Act of 1996 ( Public Law 104-191, 110 Stat. 1936) and the Health Information Technology for Economic and Clinical Health Act ( Public Law 111-5, 123 Stat. 226-279 and 467-496) shall be deemed to be in compliance with the provisions of this act.
73 P.S. § 2305c