HIPAA Privacy Rule (for Professionals)

20260502_rev01 · COMPARED WITH 20250702_rev01 · ARCHIVE SNAPSHOT, DATE APPROXIMATE

Full text changes — 20250702_rev01 to 20260502_rev01

1The HIPAA Privacy Rule establishes national standards to protect individuals' medical records and other individually identifiable health information (collectively defined as "protected health information") and applies to health plans, health care clearinghouses, and those health care providers that conduct certain health care transactions electronically. The Rule requires appropriate safeguards to protect the privacy of protected health information and sets limits and conditions on the uses and disclosures that may be made of such information without an individual's authorization. The Rule also gives individuals rights over their protected health information, including rights to examine and obtain a copy of their health records, to direct a covered entity to transmit to a third party an electronic copy of their protected health information in an electronic health record, and to request corrections.
1- - About HHS
22
3The Privacy Rule is located at 45 CFR [Part 160](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160) and Subparts A and E of [Part 164](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164).
3 HHS is a U.S. executive department that touches the lives of nearly all Americans by protecting your rights, research, food safety, health care, aging, and much more.
44
5[Click here to view the combined regulation text](https://hhs.gov/hipaa/for-professionals/privacy/laws-regulations/combined-regulation-text/index.html) of all HIPAA Administrative Simplification Regulations found at 45 CFR 160, 162, and 164.
5 - About the Department
6 - Press Room
7 - Careers
8 - Standards and Compliance
9 - Accountability and Transparency
610
7## Privacy Rule History
11- [RealFood.gov](https://realfood.gov/)
12- [MAHA](https://hhs.gov/one-year-of-maha/index.html)
13- - Programs & Services
814
9- April 26, 2024 - [HIPAA Privacy Rule to Support Reproductive Health Care Privacy - Final Rule](https://www.federalregister.gov/documents/2024/04/26/2024-08503/hipaa-privacy-rule-to-support-reproductive-health-care-privacy)
10- April 17, 2023 - [HIPAA Privacy Rule to Support Reproductive Health Care Privacy - Proposed Rule](https://www.federalregister.gov/documents/2023/04/17/2023-07517/hipaa-privacy-rule-to-support-reproductive-health-care-privacy)
11- March 10, 2021 - [Extension of Comment Period for Modifications to the HIPAA Privacy Rule to Support, and Remove Barriers to, Coordinated Care and Individual Engagement - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2021-03-10/pdf/2021-05021.pdf)
12- January 21, 2021 - [Modifications to the HIPAA Privacy Rule to Empower Patients, Improve Coordinated Care, and Reduce Regulatory Burdens - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2021-01-21/pdf/2020-27157.pdf)
13- December 14, 2018 - [Modifying the HIPAA Rules to Improve Coordinated Care - Request for Information](https://www.govinfo.gov/content/pkg/FR-2018-12-14/pdf/2018-27162.pdf)
14- January 6, 2016 - [HIPAA Privacy Rule and the National Instant Criminal Background Check System (NICS) - Final Rule](https://www.govinfo.gov/content/pkg/FR-2016-01-06/pdf/2015-33181.pdf)
15- February 6, 2014 - [Patients' Access to Test Reports Under the HIPAA Privacy Rule and the Clinical Laboratory Improvement Amendments of 1988 (CLIA) Program - Final Rule](https://www.govinfo.gov/content/pkg/FR-2014-02-06/pdf/2014-02280.pdf)
16- January 7, 2014 - [HIPAA Privacy Rule and NICS - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2014-01-07/pdf/2014-00055.pdf)
17- April 23, 2013 - [HIPAA Privacy Rule and NICS - Advance Notice of Proposed Rulemaking](https://www.govinfo.gov/content/pkg/FR-2013-04-23/pdf/2013-09602.pdf)
18- January 25, 2013 - [Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules under the Health Information Technology for Economic and Clinical Health (HITECH) Act and the Genetic Information Nondiscrimination Act, and Other Modifications - Final Rule](https://www.govinfo.gov/content/pkg/FR-2013-01-25/pdf/2013-01073.pdf) (The "Omnibus HIPAA Final Rule")
19- September 14, 2011 - [Patients' Access to Test Reports Under the HIPAA Privacy Rule and CLIA Program - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2011-09-14/pdf/2011-23525.pdf)
20- May 31, 2011 - [HIPAA Privacy Rule Accounting of Disclosures Under the HITECH Act - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2011-05-31/pdf/2011-13297.pdf)
21- July 14, 2010 - [Modifications to the HIPAA Privacy, Security, and Enforcement Rules under the HITECH Act - Proposed Rule](https://www.govinfo.gov/content/pkg/FR-2010-07-14/pdf/2010-16718.pdf)
22- May 3, 2010 - [HIPAA Privacy Rule Accounting of Disclosures Under the HITECH Act - Request for Information](https://www.govinfo.gov/content/pkg/FR-2010-05-03/pdf/2010-10054.pdf)
23- October 7, 2009 - [HIPAA Privacy Rule; Modifications Under the Genetic Information Nondiscrimination Act - Proposed Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/understanding/special/genetic/ginanprm.pdf)
24- August 14, 2002 - [Modifications to the HIPAA Privacy Rule - Final Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/privruletxt.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/privrulepd.pdf))
25- March 27, 2002 - [Modifications to the HIPAA Privacy Rule - Proposed Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/propmods.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/2002proposedmods.pdf))
26- February 28, 2001 - [Request for Comments on December 28, 2000, Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/comment.txt) ([PDF](https://www.gpo.gov/fdsys/pkg/FR-2001-02-28/pdf/01-4811.pdf))
27- February 26, 2001 - [Correction of Effective and Compliance Dates of the Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/dates.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/dates.pdf))
28- December 29, 2000 - [Technical Corrections to the Final HIPAA Privacy Rule](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/pvcfix01.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/pvcfix01.pdf))
29- December 28, 2000 - HIPAA Privacy Rule - Final Rule ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/prdecember2000all8parts.pdf))
30- November 3, 1999 - HIPAA Privacy Rule - Proposed Rule ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/1999nprm.pdf))
15 HHS is responsible for public health, health care, and human/social services for the United States of America. This includes administering over 100 programs and services.
3116
32## Other Privacy Rule Notices
17 - Health Care
18 - Health Insurance
19 - Social Services
20 - Public Health and Prevention
21 - Health Research and Information
3322
34- March 20, 2003 - Notice of Addresses for Submission of HIPAA Health Information Privacy Complaints ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/noticeaddresssubmission.pdf))
35- March 11, 2003 - [Notice of Address for Submission of Requests for Preemption Exception Determinations](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/notice.txt) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/notice.pdf))
36- December 28, 2000 - [Statement of Delegation of Authority to the Office for Civil Rights](https://hhs.gov/hipaa/for-professionals/privacy/delegation-of-authority/index.html) ([PDF](https://hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/privacyrule/fedreg.pdf))
23- - Laws & Regulations
24
25 HHS protects and helps you understand the laws and regulations, also known as "rules," that govern the nation. You also have the power to voice your opinion on these laws and regulations.
26
27 - Regulatory Information
28 - Civil Rights
29 - Laws and Regulations by Topic
30 - Human Research Protections
31 - Complaints and Appeals
32
33- - Grants & Contracts
34
35 HHS gives the most money in grants of any federal agency in the U.S. Find out about our grants and how your organization can apply for them. We also provide information on how you can work with us and our support of small businesses.
36
37 - Grants
38 - Contracts
39 - Small Business
40
41- - Radical Transparency
42
43 HHS protects and helps you understand the laws and regulations, also known as "rules," that govern the nation. You also have the power to voice your opinion on these laws and regulations.
44
45 - [CDC's ACIP Conflicts of Interest](https://www.cdc.gov/acip/disclosures/by-member.html)
46 - [Ending Anti-Semitism on College Campuses](https://hhs.gov/about/news/2025/03/03/hhs-ed-gsa-announce-additional-measures-end-anti-semitic-harassment-college-campuses.html)
47 - [Ending Wasteful Spending](https://hhs.gov/radical-transparency/ending-wasteful-spending/index.html)
48 - [Keeping Food Ingredients Safe](https://hhs.gov/about/news/2025/03/10/hhs-secretary-kennedy-directs-fda-explore-rulemaking-eliminate-pathway-companies-self-affirm-food-ingredients-safe.html)
49 - [Chemical Contaminants Transparency Tool](https://www.hfpappexternal.fda.gov/scripts/fdcc/index.cfm)