Subpart C. Subpart C—Implementation Requirements—What Must Covered Entities Do?