Federal law that required the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge. A&IS is subject to the HIPAA Privacy Rule standards, which address the use and disclosure of individuals’ personal health information (PHI).