HIPAA — Health Information Privacy
HIPAA requires covered entities (healthcare providers, health plans, clearinghouses) and their business associates to protect individually identifiable health information. Requirements include Privacy Rule, Security Rule, and Breach Notification Rule. Penalties range from $100 to $1.9 million per violation category.
HHS — Office for Civil Rights
March 1, 2026
May 30, 2026