Skip to content

HIPAA

What is HIPAA?

The Health Insurance Portability and Accountability Act, a US federal law that establishes standards for protecting sensitive health information. Includes the Privacy Rule and Security Rule.

Privacy

Related terms

PHI (Protected Health Information)

Frameworks that govern hipaa

HIPAA Security RuleView framework →GDPRView framework →ISO 27001:2022View framework →

What the standards actually require on hipaa

Requirements naming hipaa across 6 standards, quoted from the control text.

FTC Health Breach Notification Rule6 controls

HBNR crosswalk to comprehensive security + privacy + health frameworks. NIST CSF 2.0 mapping: GOVERN (privacy officer + IR + records + TPSP) + IDENTIFY (PHR identifiable info inventory + 3rd-party SDK audit + affected individual identification) + PROTECT (encr...

HBNR-Crosswalk-NIST-CSF-ISO-HIPAA · Crosswalk to NIST CSF 2.0, NIST 800-66, ISO 27001/27701, SOC 2 and HIPAA →
HITECH Act5 controls

A business associate that obtains or creates protected health information under a business associate contract may use and disclose it only in compliance with each applicable requirement of 45 CFR 164.504(e), the additional privacy requirements of the subtitle...

hitech-act::13404 · Section 13404: HIPAA Privacy Rule use and disclosure limits and penalties apply directly to business associates →
HL7 FHIR Security Framework4 controls

HL7 FHIR Coordination + 2024-2025 pipeline. COORDINATION WITH US REGULATORY FRAMEWORKS: (1) HIPAA PRIVACY + SECURITY RULES (45 CFR Parts 160 + 164, VERIFIED SEPARATELY) - foundational US healthcare privacy + security law;

HL7-FHIR-Coord-HIPAA-ONC-Cures-USCDI-TEFCA · HL7 FHIR Coordination with HIPAA, ONC Information Blocking, 21st Century Cures Act, USCDI, TEFCA + 2024-2025 Pipeline →
MARS-E4 controls

Protect Personally Identifiable Information (PII) and Protected Health Information (PHI) handled by Exchanges. Apply NIST 800-122 PII Confidentiality Impact Level determination + minimum necessary standard for use disclosure and request + HIPAA Privacy Rule 45...

MARS-E-Privacy-PII-PHI-Minimum-Necessary-HIPAA-Privacy-Rule-NIST-800-122-45-CFR-164-Subpart-E · MARS-E Privacy + PII + PHI + Minimum Necessary + HIPAA Privacy Rule + NIST 800-122 + 45 CFR 164 Subpart E →
Iowa Consumer Data Protection Act3 controls

Coordination positions ICDPA within the broader US and international privacy regulatory landscape. (1) Utah UCPA Template Parent: Iowa CDPA most closely follows Utah CDPA (UCPA effective 31 December 2023) template - shared narrow Sale definition + opt-out (NOT...

ICDPA-Coord-USStatePrivacy-UCPA-Template-VCDPA-CPA-CTDPA-Federal-FTC-GDPR-International · Iowa CDPA Coordination - Utah CDPA Template Parent + US State Privacy Patchwork + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International →
ACCME Accreditation Requirements and Standards for Integrity and Independence in Accredited Continuing Education1 control

Every applicant for initial or renewed accreditation attests that the materials it submits (self-study report, activity files and other materials) contain no individually identifiable health information under HIPAA.

accme-accreditation-requirements-and-standards-for-integrity-and-independence-in-accredited-continuing-education::P-HIPAA-GIFT · HIPAA compliance attestation on accreditation submissions, and no gift cards or personal remuneration tied to purchase of or registration for accredited CME →

Questions people ask about hipaa

What is HIPAA?
The Health Insurance Portability and Accountability Act, a US federal law that establishes standards for protecting sensitive health information. Includes the Privacy Rule and Security Rule.
Why is HIPAA important for compliance?
HIPAA is a key concept in Privacy. Understanding hipaa helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to HIPAA?
Key concepts related to HIPAA include PHI (Protected Health Information). Understanding these interconnected concepts provides a more comprehensive view of Privacy requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address HIPAA?
HIPAA appears in the requirement text of FTC Health Breach Notification Rule, HITECH Act, HL7 FHIR Security Framework, MARS-E, Iowa Consumer Data Protection Act. Across these standards we have identified 23 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about HIPAA?
Explore our compliance framework pages to see how hipaa applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how HIPAA applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.