In the United States, the Health and Human Services' (HHS) Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that patient what is protected?

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that patient's Protected Health Information (PHI) is protected. This includes any individually identifiable health information that is held or transmitted by a covered entity or its business associates.