Health Insurance Portability and Accountability Act Basics for Providers: Privacy, Security, and Breach Notification Rules

Published 03/31/2025

The Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules protect the privacy and security of health information and give patients rights to their health information. HIPAA establishes standards to safeguard the protected health information that you hold if you’re one of these covered entities or their business associates: 

  • Health plan 
  • Health care clearinghouse 
  • Health care provider that conducts certain healthcare transactions electronically

The Medicare Learning Network (MLN) 909001 Fact Sheet (PDF) from the Centers for Medicare & Medicaid Services (CMS) provides an overview of "Privacy, Security & Breach Notification Rules" and links to additional resources for: 

  • Cyber Security Guidance Material
  • HIPAA FAQ for Professionals
  • Model Notices of Privacy Practices
  • Privacy, Security, and HIPAA
  • Special Topics in Health Information Privacy
  • Training Materials

Resource: CMS MLN 909001 Fact Sheet: HIPAA Basics for Providers: Privacy, Security, & Breach Notification Rules (PDF).


Was this article helpful?