The HIPAA security rule outlines national standards for protecting electronic personal health information (ePHI) created, received, maintained, or transmitted by a covered entity. It establishes administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of ePHI.