HIPAA is the federal law that requires certain entities to protect health information. HIPAA is divided into two sections - the Privacy Rule & the Security Rule. The Privacy Rule includes requirements on how entities can use or disclose health information, and the Security Rule has requirements on how entities must secure and protect health information. HIPAA only applies to covered entities. A “covered entity” is defined as a health care provider, health plan, or healthcare clearinghouse. The narrow reach of HIPAA is good news to many employers that are concerned about whether they have to follow the HIPAA requirements. The adoption of electronic medical records (EMR) by the healthcare Industry has made it mandatory for Organizations to ensure
