The HIPAA Security Rule specifies security standards  for protecting individuals’ electronic personal health information (ePHI) that is received, used, maintained, or transmitted by covered entities and their business associates.