A federal statute that called on the federal Department of Health and Human Services to establish regulatory standards to protect the privacy and security of individually identifiable health information.
Sources:
NIST SP 800-188
under Health Insurance Portability and Accountability Act of 1996
the primary law in the United States that governs the privacy of healthcare information
Sources:
NISTIR 8053
under Health Insurance Portability and Accountability Act of 1996