HIPAA encompasses five key areas:
Privacy Rule: Protects the privacy of individually identifiable health information.
Security Rule: Sets standards for safeguarding electronic protected health information (ePHI).
Enforcement Rule: Governs the procedures for investigating HIPAA violations and imposing penalties.
Breach Notification Rule: Requires covered entities to notify affected individuals, the Secretary of HHS, and in some cases, the media of a breach of unsecured PHI.
Omnibus Rule: Integrates provisions of the HITECH Act to strengthen privacy and security protections.