"HIPAA" is an acronym for the Health Insurance Portability & Accountability Act of 1996 (August 21), Public Law 104-191, which amended the Internal Revenue Service Code of 1986. Also known as the Kennedy-Kassebaum Act, the Act includes a section, Title II, entitled Administrative Simplification, requiring:

1. Improved efficiency in healthcare delivery by standardizing electronic data interchange, and
2. Protection of confidentiality and security of health data through setting and enforcing standards.

More specifically, HIPAA called upon the Department of Health and Human Services (HHS) to publish new rules that will ensure:

1. Standardization of electronic patient health, administrative and financial data
2. Unique health identifiers for individuals, employers, health plans and health care providers
3. Security standards protecting the confidentiality and integrity of "individually identifiable health information," past, present or future.

• The bottom line: sweeping changes in most healthcare transaction and administrative information systems.

Who is affected?

Virtually all healthcare organizations – including all healthcare providers, health plans, public health authorities, healthcare clearinghouses, and self-ensured employers – as well as life insurers, information systems vendors, various service organizations, and universities.

General HIPAA Information

HIPAA.ORG - General Information - Lots of information and links.

U.S. Government Sites

DHHS - Administrative Simplification
CMS - Centers for Medicare and Medicaid Services
CMS - Medicare EDI Home Page 
HCFA - Medicare HIPAA Documents

Privacy and Security

AFEHCT - American Association of Health Care Transactions 
Medical Records, Privacy & Confidentiality

Professional Organizations