HIPAA (the US Health Insurance Portability and Accountability Act) governs protected health information (PHI). The Security Rule requires administrative, physical, and technical safeguards for electronic PHI; the Privacy Rule governs use and disclosure; the Breach Notification Rule sets reporting duties. It applies to covered entities and, through Business Associate Agreements, to their vendors. US health-data law — administrative, physical, and technical safeguards for PHI.
All frameworks · HITRUST CSF · NIST SP 800-53 Rev 5 · SOC 2 Type II · GDPR
Features · Integrations · Pricing · Frameworks · Consultants · About · Blog