Health Insurance Portability and Accountability Act

Health Insurance Portability and Accountability Act of 1996

Other short titles	Kassebaum–Kennedy Act, Kennedy–Kassebaum Act
Long title	An Act To amend the Internal Revenue Code of 1986 to improve portability and continuity of health insurance coverage in the group and individual markets, to combat waste, fraud, and abuse in health insurance and health care delivery, to promote the use of medical savings accounts, to improve access to long-term care services and coverage, to simplify the administration of health insurance, and for other purposes.
Acronyms (colloquial)	HIPAA (pronounced /ˈhɪpə/ HIP-uh)
Enacted by	the 104th United States Congress
Citations
Public law	Pub. L. 104–191 (text) (PDF)
Statutes at Large	110 Stat. 1936
Legislative history
Introduced in the House as H.R. 3103 by Bill Archer (R-TX) on March 18, 1996 Committee consideration by House Ways and Means Passed the House on March 28, 1996 (267–151) Passed the Senate on April 23, 1996 (100–0, in lieu of S. 1028) Reported by the joint conference committee on July 31, 1996; agreed to by the House on August 1, 1996 (421–2) and by the Senate on August 2, 1996 (98–0) Signed into law by President Bill Clinton on August 21, 1996

The Health Insurance Portability and Accountability Act of 1996 (HIPAA or the Kennedy–Kassebaum Act^[1][2]) is a United States Act of Congress enacted by the 104th United States Congress and signed into law by President Bill Clinton on August 21, 1996.^[3] It aimed to alter the transfer of healthcare information, stipulated the guidelines by which personally identifiable information maintained by the healthcare and healthcare insurance industries should be protected from fraud and theft,^[4] and addressed some limitations on healthcare insurance coverage. It generally prohibits healthcare providers and businesses called covered entities from disclosing protected information to anyone other than a patient and the patient's authorized representatives without their consent. The bill does not restrict patients from receiving information about themselves (with limited exceptions).^[5] Furthermore, it does not prohibit patients from voluntarily sharing their health information however they choose, nor does it require confidentiality where a patient discloses medical information to family members, friends, or other individuals not employees of a covered entity.

The act consists of five titles:

1. Title I protects health insurance coverage for workers and their families when they change or lose their jobs.^[6]
2. Title II, known as the Administrative Simplification (AS) provisions, requires the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers.^[7]
3. Title III sets guidelines for pre-tax medical spending accounts.
4. Title IV sets guidelines for group health plans.
5. Title V governs company-owned life insurance policies.