is permissible under the Federal regulations concerning standards for privacy of individually identifiable health information promulgated under section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note). (2) Terms defined For purposes of paragraph (1), the terms business associate , covered entity , and health information shall have the meanings given those terms in the Federal regulations specified in such section 264(c) of the Health Insurance Portability and Accountability Act of 1996 ( 42 U.S.C. 1320d–2 note). 6. Effective date (a) In general The prohibitions under sections 2 and 3 shall take effect on the earlier of— (1) the date the Commission issues the final rule under subsection (b)