HIPAA Security Rule

E184831

United States federal regulation health information privacy and security regulation

The HIPAA Security Rule is a U.S. federal regulation that sets national standards for protecting the confidentiality, integrity, and availability of electronic protected health information through administrative, physical, and technical safeguards.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
HIPAA Security Rule canonical	11
Health Insurance Portability and Accountability Act Security Rule	1
Health Insurance Portability and Accountability Act security rule	1
Security Standards for the Protection of Electronic Protected Health Information	1

How this entity was disambiguated

This entity first appeared as the object of triple T1605898 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: HIPAA Security Rule
Context triple: [Health Insurance Portability and Accountability Act, implementedBy, HIPAA Security Rule]

A. HIPAA Breach Notification Rule
The HIPAA Breach Notification Rule is a U.S. federal regulation that requires covered entities and their business associates to notify affected individuals, regulators, and sometimes the media when unsecured protected health information is compromised.
B. HIPAA Enforcement Rule
The HIPAA Enforcement Rule is a federal regulation that establishes the procedures and penalties for investigating, determining, and enforcing violations of the HIPAA privacy and security requirements.
C. Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. federal law that sets national standards for protecting sensitive patient health information and improving the portability and continuity of health insurance coverage.
D. HITECH Act
The HITECH Act is a U.S. law that promotes the adoption and meaningful use of electronic health records while strengthening health information privacy and security protections.
E. Federal Information Security Modernization Act of 2014
The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: HIPAA Security Rule
Target entity description: The HIPAA Security Rule is a U.S. federal regulation that sets national standards for protecting the confidentiality, integrity, and availability of electronic protected health information through administrative, physical, and technical safeguards.

A. HIPAA Breach Notification Rule
The HIPAA Breach Notification Rule is a U.S. federal regulation that requires covered entities and their business associates to notify affected individuals, regulators, and sometimes the media when unsecured protected health information is compromised.
B. HIPAA Enforcement Rule
The HIPAA Enforcement Rule is a federal regulation that establishes the procedures and penalties for investigating, determining, and enforcing violations of the HIPAA privacy and security requirements.
C. Health Insurance Portability and Accountability Act
The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. federal law that sets national standards for protecting sensitive patient health information and improving the portability and continuity of health insurance coverage.
D. HITECH Act
The HITECH Act is a U.S. law that promotes the adoption and meaningful use of electronic health records while strengthening health information privacy and security protections.
E. Federal Information Security Modernization Act of 2014
The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.
F. None of above. chosen

Statements (50)

Predicate	Object
instanceOf	United States federal regulation ⓘ health information privacy and security regulation ⓘ
abbreviationOf	Health Insurance Portability and Accountability Act Security Rule ⓘ linked to: HIPAA Security Rule
administeredBy	U.S. Department of Health and Human Services ⓘ linked to: United States Department of Health and Human Services
alsoKnownAs	Security Standards for the Protection of Electronic Protected Health Information ⓘ linked to: HIPAA Security Rule
appliesTo	HIPAA business associates ⓘ HIPAA covered entities ⓘ certain health care providers ⓘ health care clearinghouses ⓘ health plans ⓘ
codifiedAt	45 CFR Part 160 ⓘ 45 CFR Part 164 Subparts A and C ⓘ
complianceDateForMostCoveredEntities	2005-04-20 ⓘ
complianceDateForSmallHealthPlans	2006-04-20 ⓘ
distinguishes	addressable implementation specifications ⓘ required implementation specifications ⓘ
doesNotDirectlyCover	oral protected health information ⓘ paper protected health information ⓘ
effectiveDate	2005-04-20 ⓘ
enforcedBy	U.S. Department of Health and Human Services Office for Civil Rights ⓘ linked to: Office for Civil Rights
focusesOn	electronic protected health information ⓘ
jurisdiction	United States ⓘ linked to: United States of America
legalBasis	Health Insurance Portability and Accountability Act of 1996 ⓘ linked to: Health Insurance Portability and Accountability Act
partOf	Health Insurance Portability and Accountability Act ⓘ
purpose	ensure availability of electronic protected health information ⓘ protect confidentiality of electronic protected health information ⓘ protect integrity of electronic protected health information ⓘ
regulates	electronic protected health information ⓘ
relatedTo	HIPAA Privacy Rule ⓘ HITECH Act ⓘ
requires	access control for information systems containing electronic protected health information ⓘ administrative safeguards for electronic protected health information ⓘ audit controls for systems containing electronic protected health information ⓘ contingency planning for electronic protected health information ⓘ device and media controls ⓘ documentation of security measures ⓘ facility access controls ⓘ information access management ⓘ integrity controls for electronic protected health information ⓘ organizational requirements for electronic protected health information ⓘ person or entity authentication ⓘ physical safeguards for electronic protected health information ⓘ policies and procedures for electronic protected health information ⓘ risk analysis of potential risks and vulnerabilities to electronic protected health information ⓘ risk management to reduce risks to a reasonable and appropriate level ⓘ security awareness and training ⓘ security incident procedures ⓘ technical safeguards for electronic protected health information ⓘ transmission security for electronic protected health information ⓘ workforce security measures ⓘ

How these facts were elicited

Referenced by (14)

Full triples — surface form annotated when it differs from this entity's canonical label.

Health Insurance Portability and Accountability Act → implementedBy → HIPAA Security Rule ⓘ

Office for Civil Rights (HHS) → enforces → Health Insurance Portability and Accountability Act security rule ⓘ

subject linked to: Office for Civil Rights

linked to: HIPAA Security Rule

HIPAA Breach Notification Rule → relatedTo → HIPAA Security Rule ⓘ

HIPAA Enforcement Rule → relatedTo → HIPAA Security Rule ⓘ

HITECH Act → strengthens → HIPAA Security Rule ⓘ

HIPAA Security Rule → abbreviationOf → Health Insurance Portability and Accountability Act Security Rule ⓘ

linked to: HIPAA Security Rule

HIPAA Security Rule → alsoKnownAs → Security Standards for the Protection of Electronic Protected Health Information ⓘ

linked to: HIPAA Security Rule

HIPAA Privacy Rule → relatedTo → HIPAA Security Rule ⓘ

HHS to conduct compliance reviews → legalBasis → HIPAA Security Rule ⓘ

HIPAA Omnibus Rule → strengthens → HIPAA Security Rule ⓘ

104-191 → containsProvision → HIPAA Security Rule ⓘ

Title II – Preventing Health Care Fraud and Abuse; Administrative Simplification; Medical Liability Reform → basisFor → HIPAA Security Rule ⓘ

HIPAA Transactions and Code Sets standards authority → relatedTo → HIPAA Security Rule ⓘ

HIPAA Unique Identifiers standards authority → relatedTo → HIPAA Security Rule ⓘ

All labels observed (4)

How this entity was disambiguated Show

Statements (50)

How these facts were elicited Show

Referenced by (14)

How this entity was disambiguated

How these facts were elicited