Privacy Rule
l
Limits the use and disclosure of PHI
l
Gives patients the right to access their
medical records and to know who accessed
their health information
l
Restricts most disclosures of PHI to the
minimum necessary
