A United States federal law enacted in 1996 that establishes national standards for protecting sensitive patient health information (PHI - Protected Health Information). HIPAA requires covered entities and business associates to implement administrative, physical, and technical safeguards including access controls, audit trails, encryption, and authentication mechanisms to ensure the confidentiality, integrity, and availability of electronic PHI.