An Act of Congress that outlines the lawful use and disclosure of protected health information (PHI) in the United States. HIPAA compliance is regulated by the Department of Health and Human Services (HHS) and enforced by the Office for Civil Rights (OCR).

Source: HHS – Individuals, HHS – Organizations