Understanding Health Information Privacy

The HIPAA Privacy Rule provides federal protections for individually identifiable health information held by covered entities and their business associates and gives patients an array of rights with respect to that information. At the same time, the Privacy Rule is balanced so that it permits the disclosure of health information needed for patient care and other important purposes. 

The Security Rule specifies a series of administrative, physical, and technical safeguards for covered entities and their business associates to use to assure the confidentiality, integrity, and availability of electronic protected health information. 

For Consumers

Learn more about how the Privacy and Security Rules protect your health information.

For Covered Entities and Business Associates

Learn more about which entities must comply with the Privacy and Security Rules, the requirements of the rules, and guidance available to help these entities implement and maintain compliance with these requirements.

More Information About Health Information Privacy Under HIPAA

Special Topics Public Health Research Emergency Preparedness Health Information Technology Genetic Information Related Links Summary of the HIPAA Privacy Rule Summary of the HIPAA Security Rule Training Materials