HIPAA Privacy Rule

The HIPAA Privacy Rule regulates how certain entities, called covered entities, use and disclose certain individually identifiable health information, called protected health information (PHI). Among other provisions, the Privacy Rule:

· gives patients more control over their health information;

· sets boundaries on the use and release of health records;

· establishes appropriate safeguards that the majority of health-care providers and others must achieve to protect the privacy of health information;

· generally limits release of information to the minimum reasonably needed for the purpose of the disclosure;

· generally gives patients the right to obtain a copy of their own health records and request corrections; and empowers individuals to control certain uses and disclosures of their health information.