HIPAA compliance refers to the process of ensuring that individuals and organizations adhere to the Health Insurance Portability and Accountability Act (HIPAA). This involves implementing and maintaining physical, technical, and administrative safeguards to protect protected health information (PHI).
Establishes national standards for the protection of PHI and gives patients rights over their health information.
Sets standards for protecting electronic PHI (ePHI) through administrative, physical, and technical safeguards.
Mandates notice from business associates and covered entities in the event of an unsecured PHI breach.
Specifies civil monetary penalties for non-compliance and establishes standards for investigations into HIPAA infractions.
Strengthens the security and privacy safeguards for health information by putting certain HITECH Act measures into effect.