HIPAA, passed by Congress in 1996, is a federal law that protects the privacy and security of health information.