HIPAA Security Rule
SOC 2 and HITRUST are private assessments. They are not the Security Rule. Those terms have their own pages.
Source: HHS, The Security Rule, https://www.hhs.gov/hipaa/for-professionals/security. Page read October 14, 2026.
← Glossary
Definition · Allowed AI at work
HIPAA Security Rule
The HIPAA Security Rule is the HHS regulation that requires safeguards for electronic protected health information. It covers administrative, physical, and technical safeguards. The text is 45 CFR Part 164, Subpart C. It applies to covered entities and to business associates. This page is not a security audit.
Questions
HIPAA Security Rule, answered
Does SOC 2 replace the Security Rule?
No. SOC 2 is an audit report. The Security Rule is a federal regulation. One does not substitute for the other.