The Enforcement Rule requires the following safeguards:
- Privacy of PHI
- Limitations to the disclosure of data containing PHI
- Restrictions on the use of sensitive information
- Setting controls on access to PHI.
These requirements apply to healthcare providers, clearinghouses, and health plans.