← Glossary

Definition · Allowed AI at work

HIPAA Privacy Rule

The HIPAA Privacy Rule is the HHS regulation that limits how covered entities and their business associates use and disclose protected health information. It also gives people rights to see and receive a copy of that information. The text is 45 CFR Parts 160 and 164. This page is not legal advice. See the PHI entry.

Ask Rivvi about it.

Ask what HIPAA Privacy Rule means for your organization, then bring your own files when you're ready. No card to start. Most teams are using it the same day.

HIPAA Privacy Rule

The rule applies to health plans, health care clearinghouses, and providers who bill electronically. A vendor that handles PHI for one of them is a business associate and needs a business associate agreement before PHI moves. The minimum necessary standard limits most uses and disclosures to what the task needs.

Source: HHS, The HIPAA Privacy Rule, https://www.hhs.gov/hipaa/for-professionals/privacy. Page read October 14, 2026.

Questions

HIPAA Privacy Rule, answered

Is this page a notice of privacy practices?
No. It is a short definition with a link to HHS. A covered entity's notice is a separate document.

Try it on your own data today.

Free to start. Most teams are using it the same day.