HIPAA, the Health Insurance Portability and Accountability Act, is a US law designed to protect patient health information privacy and security. It sets standards for handling, storing, and transmitting medical records and personal health information by healthcare providers, insurance companies, and their business associates.