
What is PHI? - HHS.gov
Feb 26, 2013 · PHI stands for Protected Health Information. The HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of …
Summary of the HIPAA Privacy Rule - HHS.gov
Mar 14, 2025 · Statutory and Regulatory Background The Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, was enacted on August 21, 1996. Sections …
Methods for De-identification of PHI | HHS.gov
Feb 3, 2025 · Preparation for De-identification The importance of documentation for which values in health data correspond to PHI, as well as the systems that manage PHI, for the de-identification …
Summary of the HIPAA Security Rule | HHS.gov
Dec 30, 2024 · This is a summary of key elements of the Health Insurance Portability and Accountability Act of 1996 1 (HIPAA) Security Rule, 2 as amended by the Health Information Technology for …
Individuals’ Right under HIPAA to Access their Health ... - HHS.gov
May 30, 2025 · Individuals have a right to access this PHI for as long as the information is maintained by a covered entity, or by a business associate on behalf of a covered entity, regardless of the date the …
Your Rights Under HIPAA | HHS.gov
May 30, 2025 · Learn about your health information privacy rights under HIPAA and access guidance materials designed to help you understand and exercise these rights.
Security Rule Guidance Material - HHS.gov
Sep 26, 2025 · HHS has developed guidance and tools to assist HIPAA covered entities in identifying and implementing the most cost effective and appropriate administrative, physical, and technical …
HIPAA Privacy Rule Final Rule to Support Reproductive Health Care ...
Jul 1, 2025 · The Final Rule strengthens privacy protections by prohibiting the use or disclosure of protected health information (PHI) by a covered health care provider, health plan, or health care …
505-When does the Privacy Rule allow covered entities to disclose ...
Dec 28, 2022 · The Rule permits covered entities to disclose protected health information (PHI) to law enforcement officials, without the individual’s written authorization, under specific circumstances …
Failing to implement reasonable safeguards to protect PHI in connection with disposal could result in impermissible disclosures of PHI. Further, covered entities must ensure that their workforce …