Health Information Portability and Accountability Act of 1996 Privacy Rule

The Privacy Rule protects patient information from being shared by covered entities (including health care providers) other than to provide treatment and care, allow for billing and payment, protect the public’s health, or report required information to police. As part of a declaration of a public health emergency under section 319 of the Public Health Service Act, penalties for violating the Privacy Rule may be waived.