HIPAA meaning
What HIPAA stands for, what people actually mean when they say "HIPAA", and what it does and does not cover.
HIPAA meaning at a glance
HIPAA stands for the Health Insurance Portability and Accountability Act of 1996, a U.S. federal law. In everyday use, "HIPAA" means the federal rules that protect the privacy and security of people's health information held by health care providers, health plans, clearinghouses and their business associates — mainly the Privacy, Security and Breach Notification Rules in 45 CFR Parts 160 and 164.
| Stands for | Health Insurance Portability and Accountability Act |
|---|---|
| Enacted | 1996 (Public Law 104-191) |
| Common misspelling | "HIPPA" — the correct spelling is HIPAA |
| What people usually mean | The Privacy, Security and Breach Notification Rules for health information |
| Applies to | Covered entities and their business associates — not everyone who has health data |
HIPAA is short for the Health Insurance Portability and Accountability Act of 1996. The name reflects the law’s original goals: letting people keep (“port”) health insurance coverage when they change jobs, and making health care administration more efficient and accountable.
What people mean by “HIPAA” today
When a clinic, a software vendor or a job posting mentions HIPAA, they almost always mean the health information rules issued under the law:
- the Privacy Rule — who may use and share protected health information, and patients’ rights over it;
- the Security Rule — safeguards for health information kept or sent electronically;
- the Breach Notification Rule — what to do when protected health information is exposed.
These rules live in the Code of Federal Regulations at 45 CFR Parts 160 and 164 and are enforced by the HHS Office for Civil Rights.
What HIPAA does not mean
- It is not a general privacy law for all health data. It covers covered entities — most health care providers, health plans and clearinghouses — and the business associates that handle health information for them.
- It does not stop you from talking about your own health, and it doesn’t bind friends, employers acting as employers, or most consumer apps.
- There is no official “HIPAA certification” for people, products or companies.
For a fuller picture, see What is HIPAA? and HIPAA law.
Next steps
- HIPAA for therapists in private practice →Scenario
- PHI and ePHI →Requirement
- Covered entity →Requirement
Frequently asked questions
What does HIPAA stand for?
The Health Insurance Portability and Accountability Act of 1996.
Is it HIPAA or HIPPA?
HIPAA — two A's at the end, for Portability and Accountability. "HIPPA" is a common misspelling.
Does HIPAA mean my health information is private everywhere?
No. HIPAA protects health information held by covered entities and their business associates. Health data you share with many apps, employers or social media is often outside HIPAA, though other laws may apply.