Definition
A US federal law setting security and privacy standards for handling protected health information (PHI).
Business Importance
Any support or back-office process touching US patient data — scheduling, billing, records entry — must run under HIPAA-compliant controls, making it a mandatory requirement for healthcare BPO engagements.
Industry Examples
A patient scheduling support agent accessing appointment records only through an encrypted, access-logged system with no local data storage.