HIPAA Compliance

Overview

HIPAA (Health Insurance Portability and Accountability Act) mandates how covered entities and business associates protect Protected Health Information (PHI). The Security Rule requires administrative, physical, and technical safeguards. Non-compliance fines range from $100 to $50,000 per violation, up to $1.9M/year per category.

PHI Identification and Classification

PHI is any individually identifiable health information. The 18 HIPAA identifiers: