The HIPAA Privacy Rule establishes national standards for the protection of individually identifiable health information (“protected health information” or PHI). It applies to health care providers and other covered entities that conduct certain health care transactions electronically.
The Privacy Rule:
- Requires safeguards to protect PHI
- Limits uses and disclosures of PHI without authorization
- Provides individuals rights to access, copy, transmit, and request correction of their health records
The HIPAA Privacy Rule is codified at 45 CFR Part 160 and Subparts A and E of Part 164.
Full regulatory text is available at:
https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C
