Answer:

The Department of Health and Human Services (HHS) has determined that CMS will have responsibility for enforcing the transactions and code set standards, as well as security and identifiers standards, including the Employer Identification Number (EIN) and the National Provider Identifier (NPI). The Office for eHealth Standards and Services within CMS is responsible for all enforcement activities for the above mentioned rules, while the Office for Civil Rights in HHS is responsible for enforcing the HIPAA privacy rule.