As health records became digitized and providers used online systems or applications to increase efficiency, almost all PHI required (in almost all cases) brand-new privacy and security mechanisms. First, the Privacy Rule created the standards which all applicable entities have to follow. The main goal of the Privacy Rule is to protect PHI and all patient data at the national level. In order to protect said data, the Security Rule outlines the mechanisms, technical and physical safeguards, and administrative regulations that must be in place for compliance. Meeting HIPAA compliance standards can look different for each entity, but, in general, the regulations focus on maintaining the confidentiality and integrity of PHI, protecting against threats to said maintenance, ensuring compliance by all involved, and working to pre-empt compliance violations.
