HIPAA Compliance Guide
Complete guide to HIPAA compliance for healthcare organizations and business associates. Understand the Security Rule, Privacy Rule, and how to protect PHI.
8 min read
Updated: January 2026HIPAA
Healthcare
PHI
Security Rule
What is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) establishes national standards for protecting sensitive patient health information (PHI). It applies to covered entities and their business associates.
⚠️ Who Must Comply?
HIPAA applies to healthcare providers, health plans, healthcare clearinghouses, and any business associate that handles PHI on their behalf.
HIPAA Rules
Security Rule
Technical, administrative, and physical safeguards for ePHI
Privacy Rule
Standards for use and disclosure of PHI
Breach Notification Rule
Requirements for reporting data breaches
Enforcement Rule
Penalties and enforcement procedures
Security Rule Safeguards
| Category | Examples |
|---|---|
| Administrative | Risk analysis, workforce training, policies |
| Physical | Facility access, workstation security, device disposal |
| Technical | Access controls, encryption, audit logging |
How Axura Helps
- Automated risk analysis documentation
- Evidence of technical safeguards from cloud integrations
- Employee training tracking
- Audit log collection and retention
- Business Associate Agreement tracking