HIPAA Goals: Provide protections for privacy rights and raise awareness about this protection.

• Trust: Patients should understand this is to protect them and trust the security and privacy of their health information. 
• Communication: Encourage open communication between patients and providers. Staff who interact with patients should be able to explain these goals to patients as well as be able to provide general information about HIPAA.
• Information Flow: Right information to the right people at the right time. 

Who must comply with HIPAA: 

• Generally any organization or person that involves disclosure or use of identifiable health information.
• Most Health Care Providers and Business Associates, such as Electronic Heath Record Vendors and Billing Services.

PHI (Protected Health Information): Information that identifies an individual, or likely could be linked to an individual and their past, present, or future:

• Physical Health Condition
• Mental Health Condition
• Health Care Received/Provided
• Payments for Healthcare