The HIPAA Privacy Rule went into effect April 14, 2003. It protects the confidentiality of patients' health data by regulating:
- How PHI is used
- To whom PHI is disclosed
- How and where PHI is maintained
Under the HIPAA Privacy Rule, PHI regulations apply to all forms, including oral, written, and electronic communications.
The HIPAA Privacy Rule:
- Requires reasonable security measures to protect patients' health information
- Establishes accountability for use and release of PHI
- Gives patients rights regarding their health information
