A Practice Note addressing requirements for protecting the privacy of personal health information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). This resource describes which entities and types of health information are covered by the Privacy Rule, and the permitted and prohibited uses and disclosures of health information.