Privacy & security
HIPAA
Health Insurance Portability and Accountability Act — Privacy and Security Rules
Edition last checked against publisher sources:
Scope
HIPAA's Privacy Rule (Subpart E) governs the use and disclosure of protected health information, and its Security Rule (Subpart C) sets safeguards for electronic PHI. Together they define what can be recorded in the room, who may access it, and how it must be protected.
Where it applies in the room
- Audio, video, and image capture in patient care areas
- Access controls on EHR, monitor, and camera feeds
- Business Associate Agreements with technology vendors
Caveats
- HHS published a proposed update to the Security Rule in January 2025. As of this check it remains a proposed rule; the current Security Rule continues to apply. Check the Federal Register for final action.
Source & further reading
- · HIPAA Privacy Rule (HHS) — regulator
- · HIPAA Security Rule (HHS) — regulator
- · 45 CFR Part 164 (eCFR) — federal regulation
Also known as
- HIPAA Privacy Rule
- HIPAA Security Rule
- HIPAA
- 45 CFR Part 164
Help us improve
Spotted something wrong, outdated, or unclear? Let the editors know.
Cited in
Guides that reference HIPAA
Computer Vision in Healthcare
What cameras in patient rooms can see, what they cannot, and why the distinction matters.
Virtual Nursing Explained
How a remote nurse joins the bedside — and where the model helps most.
HIPAA Basics
What HIPAA does, what it doesn't, and how it applies inside the room.
Privacy in the Room
Beyond HIPAA: what patients notice, what regulators enforce, and what good practice looks like.