Health Insurance Portability and Accountability Act (HIPAA) is a law that sets the standard for sensitive patient data protection. It ensures that companies that handle Protected Health Information (PHI) have physical, network, and process security measures in place. Anyone providing treatment, payment and operations related to healthcare and business associates with access to patient information and support providers for treatment, payment, or operations must meet HIPAA compliance.