HIPAA is a U.S. federal law enacted in 1996 to ensure the privacy and security of protected health information (PHI). It establishes national standards for the protection of electronic PHI (e-PHI) held by covered entities and business associates, including healthcare providers, health plans, and healthcare clearinghouses. HIPAA mandates the implementation of administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of e-PHI.