Privacy Rule
Defines who can access and share PHI.
Security Rule
Sets standards for securing ePHI (electronic Protected Health Info).
Breach Notification Rule
Requires notifying users and regulators in case of a breach.
Omnibus Rule
Expands compliance to all third-party partners and associates.
Enforcement Rule
Outlines how violations are investigated and penalized.
