The Standards for Privacy of Individually Identifiable Health Information (“Privacy Rule”) establish a standard for the use and protection of individuals’ health information and apply to certain covered entities or their business associates. Covered entities may only disclose an individual’s protected health information in limited situations. Covered entities or individuals that fail to comply with the Privacy Rule standards may be subject to civil or criminal penalties
