Federal law protects the privacy of patients’ identifiable health information. This important law is the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule. It is enforced by the Office for Civil Rights within the U.S. Department of Health and Human Services (DHHS).

The HIPAA Privacy Rule does not prohibit everyone who has access to your personal health information from disclosing it. Even those organizations, agencies, and individuals who must obey the law are allowed to share your health information in some instances.

The health privacy information on the DHHS Web site provides a good explanation of who is covered by the HIPAA Privacy Rule, what health information is protected, and how to file a complaint with the Office for Civil Rights if you think someone has failed to protect your privacy.

This information last reviewed 3/21/10.