HIPAA consists of two main rules: the Privacy Rule and the Security Rule. The Privacy Rule sets the standards for who can access and share PHI, whereas the Security Rule establishes standards for securing PHI that is stored or transferred electronically.