What is HIPAA?

HIPAA is the US law that sets rules for protecting patients' health information held by healthcare providers, insurers and their business associates.

Its Privacy and Security Rules require safeguards such as access controls, encryption, audit logs and staff training, and require providers to sign business associate agreements with vendors that handle protected health information on their behalf.