Covered entities and business associates may soon be required to make a log of all disclosures of protected health information, both for treatment, payment and operations as well as any other…

Covered entities and business associates may soon be required to make a log of all disclosures of protected health information, both for treatment, payment and operations as well as any other purposes. Previously, there was an exception for TPO purposes. What part of healthcare regulation first required logging methodology of electronic protected health information disclosures?