The Health Insurance Portability and Accountability Act (HIPAA) includes provisions to securely manage the privacy of health information. The HIPAA rules apply to entities dealing with patient health data, including medical providers, insurance companies, and employer health plans.
The Health Information Technology for Economic and Clinical Health Act expanded the HIPAA rules related to the disclosure and use of patient health information, requiring necessary safeguards to protect PHI.