/**
 * HITECH Act Compliance Pack
 *
 * Health Information Technology for Economic and Clinical Health Act
 * (2009), as amended by:
 *   - The HIPAA Omnibus Rule (2013): makes Business Associates and
 *     their subcontractors directly liable for HIPAA compliance.
 *   - HR 7898 (Jan 2021): Safe-harbour law requiring HHS to consider
 *     12+ months of recognised security practices (NIST CSF, HITRUST,
 *     §405(d) HICP) when assessing fines and audit remedies.
 *
 * HITECH always activates alongside HIPAA. The governance runtime
 * blocks HITECH activation without HIPAA active. Merged policy uses
 * HIPAA's encryption, PHI detection, and retention, and layers
 * HITECH-specific workflows on top:
 *   - 60-day breach notification clock (individuals + HHS; 500+
 *     records also media in the jurisdiction).
 *   - Annual HHS small-breach report by 1 March of the following year.
 *   - BA chain tracking (subcontractors of BAs must themselves have
 *     BAAs with the BA).
 *   - Tiered penalty classification (1-4) for every violation.
 *   - Recognised-security-practices attestation register for HR 7898
 *     mitigation.
 *   - Sale of PHI / marketing-use authorisation gating.
 *
 * Authority: HHS Office for Civil Rights (OCR).
 *
 * @connexum/ai-governance
 */
import { CompliancePack } from './index';
import { CategoryClassifiers } from '../classification/pack-driven-classifier';
/**
 * HITECH category classifiers.
 * HITECH layers BA chain + breach clock + penalty tier on top of HIPAA.
 * This pack governs process flows; PHI/CREDENTIALS classification
 * is shared with HIPAA (HITECH always activates alongside HIPAA).
 */
export declare const HITECH_CATEGORY_CLASSIFIERS: CategoryClassifiers;
export declare const HITECH_PACK: CompliancePack & {
    categoryClassifiers: CategoryClassifiers;
    subjectKeyedCategories: string[];
};
//# sourceMappingURL=hitech.d.ts.map