HIPAA is the “Health Insurance Portability and Accountability Act of 1996”, Public Law 104-191.
HIPAA contains three parts relevant to healthcare information, which include requirements related to the:
- Privacy of individually identifiable health information;
- Security of electronic health information; and
- Standardization of transaction and code sets.

- The National Institute of Standards and Technology (NIST) released the draft publication SP 800-66 Rev1, "An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule," on May 1.
The publication discusses security considerations and resources that covered entities may find valuable as they comply with the security rule. This included educating readers on security terms and concepts used and discussed in the security rule, according to the NIST Web site.
The publication is available on the NIST Web site. Comments will be accepted until June 13.
http://csrc.nist.gov/publications/drafts/
800-66-Rev1/Draft_SP800-66-Rev1.pdf

