Skip to main content

HIPAA (Health Insurance Portability and Accountability Act)

ICON - HIPAA.png


Region​

US

Focus​

Health

Description​

The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. regulation designed to safeguard the privacy, security, and confidentiality of individuals' healthcare information. It establishes stringent standards for the handling, storage, and sharing of protected health information (PHI) by healthcare providers, insurers, and associated entities, ensuring compliance and fostering trust in the healthcare system.

Key Details​

  • Applies to healthcare providers, insurers, and business associates.
  • Mandates administrative, physical, and technical safeguards for protected health information (PHI).
  • Enforced by the US Department of Health and Human Services (HHS).

More Information​

NIST SP 800-66 Rev. 2. Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide