HHS HIPAA Home
Central HHS access point for HIPAA rights, rules, news, and guidance.
- Individual rights
- Professional guidance
- HIPAA updates
Compliance Resources
HIPAA & Privacy
Authoritative privacy, security, breach, enforcement, and cybersecurity guidance for regulated healthcare organizations.
Reference standard: Confirm the current effective date and applicability of each source before relying on it for an audit finding, coding decision, provider education, or compliance determination.
HIPAA for Professionals
HHS guidance for covered entities, business associates, and regulated professionals.
- Privacy Rule
- Security Rule
- Enforcement Rule
HIPAA Privacy Rule
Standards protecting medical records and individually identifiable health information.
- Permitted uses and disclosures
- Individual rights
- Covered entities
HIPAA Security Rule
Standards for safeguarding electronic protected health information.
- Administrative safeguards
- Physical safeguards
- Technical safeguards
Breach Notification Rule
Notification requirements following a breach of unsecured protected health information.
- Individual notification
- HHS notification
- Media notification
HHS Healthcare Cybersecurity
HHS healthcare-sector cybersecurity guidance and resources.
- Cybersecurity guidance
- Risk management
- Security resources