The website for Health and Human Services will have a lot of the info you need.

http://www.hhs.gov/ocr/privacy/index.html

There is an FAQ with information about your question:

http://www.hhs.gov/ocr/privacy/hipaa/faq/health_information_technology/index.html

another good resource is:

http://www.healthit.gov/providers-professionals