HIPAA Glossary · Laws & rules
HIPAA
The Health Insurance Portability and Accountability Act of 1996 — the federal law that sets US healthcare privacy and security obligations.
Context
The privacy and security obligations everyone means by "HIPAA" live in its implementing regulations at 45 CFR Parts 160 and 164 — the Privacy Rule, Security Rule, Breach Notification Rule, Omnibus Rule, and Enforcement Rule. HIPAA itself is the enabling statute; the rules are where the operational requirements live.
Related terms
- HITECH Act — The 2009 law that strengthened HIPAA — created breach notification, extended direct liability to business associates, and set the four-tier penalty structure.
- Privacy Rule — The HIPAA regulation governing how PHI in any form may be used and disclosed, and the rights individuals hold over their information.
- Security Rule — The HIPAA regulation requiring administrative, physical, and technical safeguards for ePHI.
Where this fits
This is one of 50+ terms in the HIPAA Glossary. For how HIPAA is structured end-to-end, see the Security Rule guide and the Privacy Rule guide.