Privacy & security

HIPAA

Health Insurance Portability and Accountability Act — Privacy and Security Rules

US Department of Health and Human Services (HHS/OCR)Latest · 45 CFR Parts 160 and 164US federal regulation. Enforced by HHS Office for Civil Rights (OCR).

Scope

HIPAA's Privacy Rule (Subpart E) governs the use and disclosure of protected health information, and its Security Rule (Subpart C) sets safeguards for electronic PHI. Together they define what can be recorded in the room, who may access it, and how it must be protected.

Where it applies in the room

  • Audio, video, and image capture in patient care areas
  • Access controls on EHR, monitor, and camera feeds
  • Business Associate Agreements with technology vendors

Source & further reading

Also known as

  • HIPAA Privacy Rule
  • HIPAA Security Rule
  • HIPAA
  • 45 CFR Part 164

Help us improve

Spotted something wrong, outdated, or unclear? Let the editors know.