chain of trust

A term used in the HIPAA Security NPRM for a pattern of agreements that extend protection of health information by requiring that each covered entity that shares individually identifiable health care information with another entity require that entity provide protections comparable to those provided by the original covered entity, and that that entity, in turn, require that any other entities with which it shares the information satisfy the same requirements.

• Health Care Information Portability and Accountability Act of 1996