thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Health Insurance Portability and Accountability Act (HIPAA)

1996 US law whose administrative simplification rules protect the privacy and security of protected health information.

Definition

HIPAA's Privacy Rule, Security Rule, Breach Notification Rule, and Enforcement Rule apply to covered entities and business associates. HHS Office for Civil Rights enforces it with tiered civil penalties, and the Department of Justice handles criminal violations. The HITECH Act of 2009 strengthened enforcement and extended obligations to business associates.

Example

A dental practice must protect patient records and provide a Notice of Privacy Practices.

Exam tip

HIPAA applies to covered entities and business associates, not to all holders of health data, such as most fitness apps.

Related terms