The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. law designed to provide privacy standards to protect patients' medical records and other health information provided to health plans, doctors, hospitals, and other healthcare providers. Enacted in 1996, HIPAA mandates the protection and confidential handling of protected health information (PHI).