HIPAA
Health Insurance Portability and Accountability Act
U.S. Department of Health and Human Services (HHS), under a 1996 federal law
Why It Exists
To protect the privacy and security of individuals' health information while still allowing it to flow where it's legitimately needed, between providers, insurers, and the systems that keep healthcare running.
Who It's For
US healthcare providers, health insurers, and healthcare clearinghouses, plus their "business associates", including any cloud vendor or software platform that processes protected health information (PHI) on their behalf.
Current Status
A US federal law, not a versioned standard. Its Privacy Rule and Security Rule set the operative requirements for protecting health information; HHS periodically issues updated guidance and enforcement actions rather than new numbered releases.
HHS: HIPAA Security RuleFrequently Asked Questions
Other Frameworks
KloudSec, built by the team behind Toc Consulting
See HIPAA checked automatically, continuously
What you just read is a manual, one-time check. KloudSec runs this and 400+ more automated checks across 90+ AWS services, continuously, agentless, live in about 5 minutes.