HIPAA - Health Insurance Portability and Accountability Act of 1996

The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Note: HIPAA privacy standards became effective in April 2003 and the HIPAA security standards will go into effect April 21, 2005.

EDUCAUSE has identified links concerning HIPAA that may be useful to the higher education community. Many of these links have been contributed by EDUCAUSE members. If you have additional resources you would like to include on this page, send the information to: [email protected]

Federal Government Resources

HIPAA Security Standards
Health Insurance Reform: Security Standards; Final Rule. February 20, 2003.

HIPAA Privacy Rule Introduction
Standards for Privacy of Individually Identifiable Health Information.

Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Public Law 104-191, passed by the 104th Congress

HIPAA Security Rule Crosswalk to NIST Cybersecurity Framework
This crosswalk document identifies “mappings” between the Cybersecurity Framework and the HIPAA Security Rule.

Office for Civil Rights - HIPAA
The privacy provisions of the federal law, the Health Insurance Portability and Accountability Act of 1996 (HIPAA), apply to health information created or maintained by health care providers who engage in certain electronic transactions, health plans, and health care clearinghouses.

Universities and HIPAA

Browse Health Insurance Portability and Accountability Act (HIPAA)