HHS Security Rule

The HIPAA act also established the HHS security rule to ensure the security and privacy of health care and health insurance consumers' protected health information. The security rule is hence a part of the HIPAA act and covers the subset of information which is already covered by the privacy rule.

It protects all individually identifiable health information created by a covered entity and receives, maintains or transmits in electronic form. This type of information is known as e- PHI, or electronic protected health information, according to security rules. The security rule does not apply to information sent orally or in writing.

General rules

According to the security rule the entities covered need to maintain reasonable and appropriate administrative, physical and technical safeguards in order to protect the e-PHI. To understand specifically what the security rule covers generally, let us see the following:

  • Ensuring the confidentiality, availability and integrity of the e-PHI which is created, maintained received or transmitted by them.
  • Identify and protect against the threats to the security or integrity of the information and which can be reasonably anticipated.
  • Protection against impermissible uses of disclosure that can be reasonably anticipated.
  • Ensure compliance by the workforce


  • According to the security rule confidentiality is defined as the e-PHI which is not disclosed to unauthorized people. This in turn supports the privacy rule under the HIPAA act and it also protects the integrity and availability of the e-PHI. The security rule, on the other hand, allows authorised persons to access the information when necessary for providing the required health care or health insurance service to the consumer.

    The size of the entity does not matter, according to HHS, because covered entities range from the smallest provider to the largest multi-state health plan. We, too, adhere to HIPAA security rules to ensure that not only our clients' but also the end consumer's information is secure and protected. This makes us a partner of choice for all the different dental and medical service and insurance providers in the country.