Focus 1
Security Rule
Administrative, physical, and technical safeguards for electronic protected health information.
Framework hub
HIPAA
HIPAA applies to US covered entities and business associates, including AI vendors, cloud providers, and software companies handling ePHI on their behalf.
Focus 2
Breach notification
Notification duties for covered entities and business associates after reportable breaches.
Focus 3
AI vendors
Software and AI providers may become business associates when they process ePHI for covered entities.