The Health Insurance Portability and Accountability Act (HIPAA) protects medical records and PHI through a Privacy Rule that applies to health plans, healthcare clearinghouses and healthcare providers that conduct electronic transactions.