The HIPAA Privacy Act requirements ensure the confidentiality and integrity of all physical and mental health information that can be attributed to an individual. The requirements obligate that covered entities, such as health plans and health care providers , may not use or disclose protected health information, except as permitted by HIPAA, unless pursuant to specific authorization. It also sets forth administrative requirements that covered entities must follow regarding the protected health information. For further information, contact Human Resources.

HIPAA Regulations