Privacy Rule: Protects the privacy of individually identifiable health information. Security Rule: Sets standards for the security of electronic PHI. Breach Notification Rule: Requires covered entities to notify affected individuals and the Department of Health and Human Services (HHS) in the event of a data breach. Enforcement Rule: Provides guidelines for investigations and penalties for non-compliance.
