info@nexoprivacy.com +254 768200243 Mon - Sat | 24 Hours
Admin
Home Policies Health Insurance Portability and Accountability Act (HIPAA)
North America · United States

Health Insurance Portability and Accountability Act (HIPAA)

US federal standard for safeguarding Protected Health Information (PHI) held by covered entities and their business associates.

Quick facts

  • Code: HIPAA
  • Jurisdiction: United States
  • Region: North America
  • Enforcement:
    Civil and criminal penalties from $100 to $1.5M / year per violation category
  • Official source
Get help with HIPAA Free site scan

HIPAA establishes administrative, physical and technical safeguards for PHI. Our programme covers Security Risk Analysis, Business Associate Agreements, breach-notification readiness and HITECH-aligned controls.

Key principles & obligations

Privacy Rule
Security Rule
Breach Notification Rule
Enforcement Rule
Minimum necessary
More in North America

Related frameworks.

California, USA

California Consumer Privacy Act (CCPA/CPRA)

Grants California residents broad rights over personal information and creates strict obligations for businesses that meet the revenue or data thresholds.

Read summary
Canada

Personal Information Protection and Electronic Documents Act (PIPEDA)

Canada's federal private-sector privacy law - likely to be replaced by the Consumer Privacy Protection Act (CPPA) under Bill C-27.

Read summary