The HIPAA Privacy Rule went into effect on April 14, 2003. It protects the confidentiality of patient's health data by regulating:
- How PHI is used
- To whom PHI is disclosed
- How and where PHI is maintained
Under the HIPAA Privacy Rule, PHI regulations apply to all forms of communication, including oral, written, and electronic communications.
The HIPAA Privacy Rule:
- Requires reasonable security measures to protect patient's health information
- Establishes accountability for the use and release of PHI
- Gives patients rights regarding their health information