While the HIPAA Privacy Rule allows patients to access and manage their own PHI, the HITECH Act expands those rights by enabling patients to obtain electronic copies of their health records, provided that the covered entity keeps those records in that format. Additionally, HITECH forbids businesses from selling PHI unless very specific, limited circumstances apply. This successfully prevented service providers from making money off of treatment suggestions.