HIPAA was enacted in 1996, with enforcement of privacy rule beginning in 2003. The original law focused on providing health insurance to individuals who lost or changed jobs and reducing healthcare fraud and patient abuse. It was later amended to include the HIPAA Privacy Rule that established security standards for the use, disclosure, and protection of PHI (protected health information). The privacy rule took effect on April 14, 2003.