Question: what is the difference between privacy rule and security rule?
Answer: The Privacy Rule sets the standards for, among other things, who may have access to PHI, while the Security Rule sets the standards for ensuring that only those who should have access to EPHI will actually have access. ... In contrast, the Security Rule covers only protected health information that is in electronic form.