HIPAA
US Health Insurance Portability and Accountability Act — governs the privacy and security of protected health information.
HIPAA is a US federal law that applies to Covered Entities (health plans, providers, clearinghouses) and their Business Associates. The Security Rule mandates administrative, physical and technical safeguards for electronic protected health information (ePHI). HIPAA has no certification; compliance is proven through documentation, audits and contractual BAAs.