The primary law governing PHI is the Health Insurance Portability and Accountability Act (HIPAA). HIPAA sets national standards for the protection of PHI and mandates that health care providers, including nurses, implement safeguards to ensure its confidentiality, integrity, and availability.