# HIPAA

URL: https://www.getdynamiq.ai/glossary/hipaa

> The US Health Insurance Portability and Accountability Act of 1996, whose Privacy and Security Rules govern protected health information.

The US Health Insurance Portability and Accountability Act of 1996, whose Privacy and Security Rules govern protected health information.

HIPAA governs protected health information handled by covered entities, health plans, providers and clearinghouses, and by their business associates, vendors that handle protected health information on a covered entity's behalf. A vendor acting as a business associate must sign a Business Associate Agreement setting out how it will safeguard that data, and the Department of Health and Human Services' Office for Civil Rights enforces the requirement.

HIPAA was enacted on August 21, 1996. Covered entities have had to comply with the Privacy Rule since April 14, 2003, and with the Security Rule since April 21, 2005.

Any AI system that reads, stores or summarizes patient information is handling protected health information. A clinical intake agent summarizing patient notes on a hospital's behalf is doing exactly the kind of processing a Business Associate Agreement is meant to cover, whether or not anyone thought of it as a HIPAA question at the time.

**In Dynamiq**, HIPAA is supported with a signed Business Associate Agreement available, and PII detection can flag identifiable information before it reaches a model or leaves a workflow, so a healthcare team can see where protected health information enters a process before deciding how that step should be handled.

Sources: [HHS.gov, Summary of the HIPAA Privacy Rule](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html), [HHS.gov, Summary of the HIPAA Security Rule](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html)

## See it in Dynamiq

-   [Security and Trust Center](https://www.getdynamiq.ai/security)
-   [Healthcare](https://www.getdynamiq.ai/industries/healthcare)

## Related terms

-   [SOC 2](https://www.getdynamiq.ai/glossary/soc-2)
-   [GDPR](https://www.getdynamiq.ai/glossary/gdpr)
-   [PII detection](https://www.getdynamiq.ai/glossary/pii-detection)
-   [Data residency](https://www.getdynamiq.ai/glossary/data-residency)

## See an agent on your own workflow.

Bring a process and its documents. Our engineers will show you how Dynamiq runs it, in your environment or ours.

[Start free](https://app.getdynamiq.ai/signup) · [Talk to the team](https://www.getdynamiq.ai/book-a-demo)