foundations

HIPAA regulatory overview

A source-led map of the HIPAA Privacy, Security, and Breach Notification Rules.

Current requirement Identifier HIPAA-OVERVIEW Version 1.0

HIPAA requirements are organized in federal regulations and official agency guidance. Start with the current text of 45 CFR Part 164, then use official HHS explanations to understand the rule structure.

This hub distinguishes current requirements from proposed rules and nonbinding implementation guidance. It does not decide whether a particular organization is covered or what safeguards are reasonable for a specific risk profile.

Authority and source

Authority: Primary source
Citation: 45 CFR Part 164
Publisher: Office of the Federal Register
Source identifier: 45-CFR-164
Source status: verified

Open primary source

Change and publication history

Initial reviewed publication — Sep 5, 2026