U.S. regulation

U.S. Department of Health & Human Services — Office for Civil Rights

HHS's OCR enforces HIPAA (Health Insurance Portability and Accountability Act) — the U.S. healthcare privacy and security regime. Investigates breaches and brings enforcement actions against covered entities and business associates.

Short name: U.S. Department of Health & Human Services (Office for Civil Rights)
Scope: U.S. regulation
Homepage: hhs.gov
Standards governed: 1

Standards governed by U.S. Department of Health & Human Services (Office for Civil Rights)

HIPAA 45 CFR Parts 160 & 164 United States Privacy If your site collects, displays, or transmits protected health information, HIPAA applies. A privacy policy plus an explicit Notice of Privacy Practices and a clear consent flow are the minimum visible signals.