[15] Office for Civil Rights, US Department of Health and Human Services, “Medical privacy: National standards to protect the privacy of personal health information,” 2000 http://www.hhs.gov/ocr/hipaa/finalreg.html.

has been cited by the following article:

• TITLE: Interpretation of Information Processing Regulations

  AUTHORS: Sabah Al-Fedaghi

  KEYWORDS: Software Requirement, Laws, Regulation, Privacy, Personal Identifiable Information

  JOURNAL NAME: Journal of Software Engineering and Applications, Vol.2 No.2, July 15, 2009

  ABSTRACT: Laws and policies impose many information handling requirements on business practices. Compliance with such regu-lations requires identification of conflicting interpretations of regulatory conditions. Current software engineering methods extract software requirements by converting legal text into semiformal constraints and rules. In this paper we complement these methods with a state-based model that includes all possibilities of information flow. We show that such a model provides a foundation for the interpretation process.