: Requires covered entities to notify affected individuals, the HHS Secretary, and sometimes the media when a breach of unsecured PHI occurs.

: Mandates administrative, physical, and technical safeguards for electronic PHI (ePHI) to ensure its confidentiality, integrity, and availability.

: Sets national standards for protecting Protected Health Information (PHI) and grants patients rights to access and control their data.

: Enhances HIPAA and HITECH Act provisions, specifically increasing the responsibilities and liabilities of business associates. What is Protected Health Information (PHI)?