The main components of HIPAA are the Privacy Rule, the Security Rule, and the Breach Notification Rule. The Privacy Rule protects the privacy of individually identifiable health information, the Security Rule sets standards for securing electronic-Protected Health Information (ePHI), and the Breach Notification Rule requires covered entities and business associates to notify affected individuals, the Department of Health and Human Services (HHS), and in some cases, the media of a breach of unsecured PHI.