The Privacy Rule helps healthcare organizations protect data. It establishes standards to protect an individual’s medical records and other protected health information (PHI).
The Rule concerns the disclosures and uses of PHI, describes an individual’s rights to access, and regulates how their medical information is used. It strives to assure that an individual’s health information is appropriately protected. Similarly, it allows access to the information needed to ensure high-quality healthcare for patients and protect the public.
The Privacy Rule draws a balance that permits the actual usage of information while protecting the privacy of people who require healthcare services.