These policies define Prohibited, Restricted and Confidential Information and explain how the University implements HIPAA (the Health Insurance Portability and Accountability Act of 1996) and regulates protected health information ("PHI") through the "Privacy Rule" and "Security Rule."