The HIPAA Rules are flexible and scalable to accommodate the enormous range in types and sizes of entities that must comply with them. Helping Entities Implement Privacy and Security Protections Any provision within this guidance that has been vacated by the Ciox Health decision is rescinded. More information about the order is available at. January 23, 2020), which may be found at. This guidance remains in effect only to the extent that it is consistent with the court’s order in Ciox Health, LLC v. Other Administrative Simplification Rules.Covered Entities & Business Associates has sub items, about Covered Entities & Business Associates.Patient Safety has sub items, about Patient Safety.Mental Health & Substance Use Disorders.Special Topics has sub items, about Special Topics.Compliance & Enforcement has sub items, about Compliance & Enforcement.Breach Notification has sub items, about Breach Notification.