The Privacy Rule, established under the Health Insurance Portability and Accountability Act (HIPAA), sets national standards for the protection of individuals' medical records and other personal health information (PHI). It applies to health plans, healthcare clearinghouses, and healthcare providers that conduct certain healthcare transactions electronically.
