HIPAA Privacy Rule
What is HIPAA Privacy Rule?
HIPAA regulations that establish standards for the protection of individually identifiable health information held by covered entities and business associates.
Terms that appear alongside hipaa privacy rule
Each of these is named in at least one of the same controls as hipaa privacy rule. The number is how many controls name both.
- hipaa 8 shared controls
- nist 6 shared controls
- hipaa security rule 5 shared controls
- risk assessment 4 shared controls
- compliance 4 shared controls
- breach notification 4 shared controls
- safe harbor 3 shared controls
- confidentiality 3 shared controls
Frameworks that govern hipaa privacy rule
What the standards actually require on hipaa privacy rule
Requirements naming hipaa privacy rule across 6 standards, quoted from the control text.
A business associate that obtains or creates protected health information under a business associate contract may use and disclose it only in compliance with each applicable requirement of 45 CFR 164.504(e), the additional privacy requirements of the subtitle...
hitech-act::13404 · Section 13404: HIPAA Privacy Rule use and disclosure limits and penalties apply directly to business associates →Protect Personally Identifiable Information (PII) and Protected Health Information (PHI) handled by Exchanges. Apply NIST 800-122 PII Confidentiality Impact Level determination + minimum necessary standard for use disclosure and request + HIPAA Privacy Rule 45...
MARS-E-Privacy-PII-PHI-Minimum-Necessary-HIPAA-Privacy-Rule-NIST-800-122-45-CFR-164-Subpart-E · MARS-E Privacy + PII + PHI + Minimum Necessary + HIPAA Privacy Rule + NIST 800-122 + 45 CFR 164 Subpart E →Implement policies authorizing access to ePHI consistent with applicable HIPAA Privacy Rule requirements. NIST recommends minimum necessary, role-based, and least-privilege access.
164.308(a)(4)(i) · Information Access Management (Standard) →Manage Business Associate relationships per HIPAA Security Rule 45 CFR 164.308(b) and HIPAA Privacy Rule 45 CFR 164.502(e). Obtain satisfactory assurances per a written contract or other arrangement (a Business Associate Agreement - BAA) that the business asso...
NISTSP66-4 · Business Associate Agreements (BAAs) and Third-Party ePHI Governance →Implement policies authorizing access to ePHI consistent with applicable HIPAA Privacy Rule requirements. NIST recommends minimum necessary, role-based, and least-privilege access.
164.308(a)(4)(i) · Information Access Management (Standard) →Handle privacy and sensitive content in logs + cloud/SaaS log considerations per NIST SP 800-92 Section 5.11 (Confidentiality and Privacy) + updates aligned with modern cloud-era practice + GDPR + CCPA + sectoral privacy law + HIPAA Privacy Rule.
NISTSP92-7 · Privacy in Logs, Sensitive Content Handling, Cloud and SaaS Log Considerations →Questions people ask about hipaa privacy rule
What is HIPAA Privacy Rule?
Why is HIPAA Privacy Rule important for compliance?
Which compliance frameworks address HIPAA Privacy Rule?
Where can I learn more about HIPAA Privacy Rule?
See how HIPAA Privacy Rule applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.