The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal law that established data privacy and security requirements for certain entities and individuals aimed at safeguarding individuals' health information.
HIPAA mandates privacy and security protections for protected health information (PHI) and applies to individuals and entities that meet the definition of “covered entities” or “business associates” under HIPAA.
As part of our recent HITRUST CSF certification, BrightInsight was required to demonstrate compliance with HIPAA.