Passed by Congress in 1996, HIPAA is a United States federal law that protects the privacy and security of health information.