HIPAA: An Overview

Since its institution in 1996, The Health Insurance Portability and Accountability Act (or HIPAA) aims to prevent healthcare fraud and ensure that all ‘protected health information’ is appropriately secured and to restrict access to health data to authorized individuals. If you have access to paper records, computers, information systems, networks, technology resources, including electronic medical records, and e-mails, you must follow HIPAA security policies, procedures and guidelines.

Covered entities and business associates, as applicable, must follow HIPAA rules. If an entity does not meet the definition of a covered entity or business associate, it does not have to comply with the HIPAA rules. Covered entities include covered health care providers, health plans, and health care clearinghouses.