{ "name": "Answering Service Quotes Compliance Rules", "title": "Compliance Rules", "url": "https://answeringservicequotes.com/datasets/compliance-rules/", "csv": "https://answeringservicequotes.com/datasets/compliance-rules.csv", "markdown": "https://answeringservicequotes.com/datasets/compliance-rules/index.md", "computed_at": "2026-10-18", "license": "https://answeringservicequotes.com/terms", "headline": "The Compliance Rules carries 4 published figures read from 4 sources' own pages, from 30 to 60 day, read 17 October 2026.", "quotes": [ "The Compliance Rules carries 4 published figures read from 4 sources' own pages, from 30 to 60 day, read 17 October 2026.", "4 of the 14 named sources read in full publish a figure; 10 publish none, read 17 October 2026." ], "citation": "\"Answering Service Quotes Compliance Rules\", updated 2026-10-18, https://answeringservicequotes.com/datasets/compliance-rules/.", "changed_since": null, "national": { "unit": "day", "n": 4, "median": 31, "min": 30, "max": 60, "p25": 30.25, "p75": 52.75, "mean": 38, "units": { "day": 4 }, "published_sources": 4, "named_sources": 14, "read_sources": 14, "not_published": 10, "published_share": 0.286 }, "by_axis": {}, "rows": [ { "source": "FTC, complying with the Telemarketing Sales Rule", "url": "https://www.ftc.gov/business-guidance/resources/complying-telemarketing-sales-rule", "figure": "31 days", "value": 31, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-17", "quote": "Sellers and telemarketers must update their call lists — that is, delete all numbers in the National Do Not Call Registry from their lists — at least every 31 days.", "source_class": "primary-government", "text_sha256": "424c4a772ba520bda7b265259b2fc124ef52f8f1549cf31d145ffabc7d5ca474" }, { "source": "HHS, breach notification rule", "url": "https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html", "figure": "60 days", "value": 60, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-17", "quote": "If a breach affects 500 or more individuals, covered entities must notify the Secretary without unreasonable delay and in no case later than 60 days following a breach.", "source_class": "primary-government", "text_sha256": "3eef4d61280cb31a61b5f3018dbc2758625b7c17c12307456b373ace1a12a7a4" }, { "source": "eCFR, 45 CFR Part 164 (HIPAA Security and Privacy Rules)", "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164", "figure": "30 days", "value": 30, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-17", "quote": "(i) Except as provided in paragraph (b)(2)(ii) of this section, the covered entity must act on a request for access no later than 30 days after receipt of the request as follows.", "source_class": "primary-government", "text_sha256": "5f8b30429c0b18c1d29c308ac715efe4d023e9e1089a61f4410e448e7c3fdf67" }, { "source": "eCFR, 47 CFR Part 64 Subpart L (telephone solicitation)", "url": "https://www.ecfr.gov/current/title-47/chapter-I/subchapter-B/part-64/subpart-L", "figure": "31 days", "value": 31, "unit": "day", "vat": null, "axis": {}, "retrieved_at": "2026-10-17", "quote": "The requirement in paragraph 64.1200(c)(2)(i)(D) for persons or entities to employ a version of the national do-not-call registry obtained from the administrator no more than 31 days prior to the date any call is made is effective January 1, 2005.", "source_class": "primary-government", "text_sha256": "bbe9690f9532347099a92dc2ba08d5bd1ef72f290b7470a4acb6a4ec4d6099e0" } ], "not_published": [ { "source": "HHS, sample business associate agreement provisions", "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS, covered entities and business associates", "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS, the HIPAA Security Rule", "url": "https://www.hhs.gov/hipaa/for-professionals/security/index.html", "retrieved_at": "2026-10-10", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS, HIPAA compliance and enforcement", "url": "https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/index.html", "retrieved_at": "2026-09-12", "reason": "read in full and no accepted figure on the page" }, { "source": "HHS HIPAA FAQs", "url": "https://www.hhs.gov/hipaa/for-professionals/faq/index.html", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "FCC, telemarketing and robocalls", "url": "https://www.fcc.gov/general/telemarketing-and-robocalls", "retrieved_at": "2026-10-17", "reason": "read in full and no accepted figure on the page" }, { "source": "FCC, stop unwanted robocalls and texts", "url": "https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts", "retrieved_at": "2026-10-10", "reason": "read in full and no accepted figure on the page" }, { "source": "FCC, rules to protect consumers from robocalls", "url": "https://www.fcc.gov/document/fcc-adopts-rules-protect-consumers-robocalls", "retrieved_at": "2026-10-03", "reason": "read in full and no accepted figure on the page" }, { "source": "California Attorney General, privacy", "url": "https://oag.ca.gov/privacy", "retrieved_at": "2026-09-19", "reason": "read in full and no accepted figure on the page" }, { "source": "ABA Model Rule 1.6, confidentiality of information", "url": "https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/", "retrieved_at": "2026-10-10", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/sample-business-associate-agreement-provisions/index.html", "label": "HHS, sample business associate agreement provisions", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html", "label": "HHS, covered entities and business associates", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/security/index.html", "label": "HHS, the HIPAA Security Rule", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html", "label": "HHS, breach notification rule", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/index.html", "label": "HHS, HIPAA compliance and enforcement", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.hhs.gov/hipaa/for-professionals/faq/index.html", "label": "HHS HIPAA FAQs", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164", "label": "eCFR, 45 CFR Part 164 (HIPAA Security and Privacy Rules)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ecfr.gov/current/title-47/chapter-I/subchapter-B/part-64/subpart-L", "label": "eCFR, 47 CFR Part 64 Subpart L (telephone solicitation)", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.fcc.gov/general/telemarketing-and-robocalls", "label": "FCC, telemarketing and robocalls", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts", "label": "FCC, stop unwanted robocalls and texts", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.fcc.gov/document/fcc-adopts-rules-protect-consumers-robocalls", "label": "FCC, rules to protect consumers from robocalls", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.ftc.gov/business-guidance/resources/complying-telemarketing-sales-rule", "label": "FTC, complying with the Telemarketing Sales Rule", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://oag.ca.gov/privacy", "label": "California Attorney General, privacy", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_6_confidentiality_of_information/", "label": "ABA Model Rule 1.6, confidentiality of information", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 4 of the 14 named sources that could be read published a usable figure; 10 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source in day (a source's median where its page yielded several accepted sentences), so N counts sources, never sentences; 40 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): one row per rule per obligation: what it requires, of whom, by when, quoted verbatim from the regulator with its citation and effective date. The derivation is the CHECKLIST - the clause list a buyer can hold a provider's contract against, assembled from the regulator's own model terms rather than from any provider's compliance page, plus the all-party consent map that decides whether a call may be recorded at all for a given pair of states. The figures nobody publishes: how many providers claiming 'HIPAA compliant' will actually sign the model BAA terms, which is measured by asking and recording the answer; and the count of trades in the coverage matrix whose regulator imposes a rule the provider must meet.", "embed": "

30 to 60 day

4 published figures, Compliance Rules, across 4 sources, read 17 October 2026

Source: Answering Service Quotes Compliance Rules
" }