US law protecting health information, requiring safeguards for patient data privacy and security.
HIPAA (Health Insurance Portability and Accountability Act) is US legislation protecting health information. The Privacy Rule governs use and disclosure of Protected Health Information (PHI); the Security Rule requires administrative, physical, and technical safeguards. HIPAA applies to covered entities (healthcare providers, health plans, clearinghouses) and their business associates. Violations can result in significant fines and criminal penalties for willful neglect.
Why It Matters
The DSC Perspective:
HIPAA applies to US healthcare data. If you handle PHI for US healthcare organisations, you're likely a business associate with HIPAA obligations. Understand your responsibilities before engaging with US healthcare clients.