HIPAA, the Health Insurance Portability and Accountability Act. It is responsible for setting the standard for protecting sensitive patient data. Organisations that deals with protected health information (PHI) must ensure that all the required physical, network, and process security measures are followed.

The HIPAA Privacy Rule explains about the saving, accessing and sharing of medical and personal information of any individual.

The HIPAA Security Rule specifically outlines the national security standards to protect health data also known as electronic protected health information (ePHI).