The HIPAA Security Rule has three fundamental safeguards preventing the disclosure of PHI. These include administrative, technical, and physical safeguards.
The Security Rule is dominated by these three safeguards, while the remainder of the Rule is assigned to General Rules and documentation requirements.
Healthcare providers are required to protect the electronic PHI of a patient by implementing the three safeguards.