The four essential HIPAA rules that govern compliance are: The Privacy Rule –In this rule, any identifiable patient data is subject to privacy covered by the covered entity or associated business. The Security Rule – This rule established the national standards for the mechanisms required to protect PHI data. These procedures extend across all stages of operations within the company.  This includes technology, administration, physical safeguards for computers and devices, and anything that could impact the safety of Protected Health Information. The Breach Notification Rule –This rule specifies what an entity must do when a security breach occurs. Organizations must have a plan in place to notify the public and victims in the event of a breach. The Omnibus Rule – This rule states that HIPAA requirements also cover associates, contractors and anyone working with a company. These companies need to update their gap analysis, risk assessment, and compliance procedures accordingly to cover any individuals working on their behalf.