To secure the privacy and electronic security of Americans’ health information, Congress passed the Health Insurance Portability and Accountability Act of 1996 (HIPAA). The legislation lays out standards to which nearly all health care providers and health plans must adhere, and also governs the sharing of private information to business associates that provide services with that private health information.