Regulations library · US federal
HIPAA
Health Insurance Portability and Accountability Act: Privacy, Security and Breach Notification Rules
In force US federal health security breach notification
Governs protected health information held by the health care system and its vendors: permitted uses and disclosures, patient rights, security safeguards for electronic records, and breach notice.
At a glance
- Who it applies to
- Covered entities (health plans, clearinghouses and most providers) and their business associates.
- Who enforces it
- HHS Office for Civil Rights
- When
- In effect since 14 April 2003. Privacy Rule compliance from 14 April 2003; Security Rule from 20 April 2005; Breach Notification Rule from 23 September 2009.
A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Sources
Primary sources are being added to this entry.
Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.