Compliance & Legal
HIPAA (Health Insurance Portability and Accountability Act)
The 1996 U.S. law that sets national standards for protecting sensitive patient health information.
HIPAA (the Health Insurance Portability and Accountability Act of 1996) is the U.S. federal law that establishes national standards for safeguarding sensitive patient health information. Its regulations require organizations that handle protected health information (PHI) to keep it confidential, accurate, and available only to authorized people.
HIPAA is enforced by the U.S. Department of Health and Human Services (HHS) Office for Civil Rights. For hosting, its most relevant components are the Privacy Rule, the Security Rule, and the Breach Notification Rule.