HIPAA
HIPAA is a US federal law that sets rules for protecting health information and for certain health insurance practices.
The Health Insurance Portability and Accountability Act (HIPAA) is a US federal law enacted in 1996. Its Privacy Rule and Security Rule set standards for the use and disclosure of protected health information (PHI) and require administrative, physical and technical safeguards for electronic health information.
It applies to covered entities, including healthcare providers, health plans and healthcare clearinghouses, and to business associates that handle health information on their behalf. The US Department of Health and Human Services (HHS) enforces it, and it is relevant when AI services process PHI.
This entry is based on AIPOST articles and widely known facts. If something is wrong, please send us a correction request.
Articles covering this entry
Reporting based on the same data-flow evidence can support work related to the EU AI Act, GDPR, SOC 2, HIPAA and ISO 27001.