The Health Insurance Portability and Accountability Act, also known as HIPAA, was approved by the United States Congress in 1996. The HIPAA Privacy Rule, also known as Health Insurance individually identifiable health information. , provided the first nationally recognizable regulations for the use/disclosure of an individual's health information. The HIPAA Privacy Rule establishes national standards to protect individuals' medical records and other personal health information and applies to health plans, health care clearinghouses, and health care providers that perform certain health care transactions electronically. (OCR 2003) When discussing the question, does HIPAA affect patients' access to their medical records. HIPAA was established to help establish standards for protecting a patient's personal health information (PHI). Therefore, HIPAA affects a patient's access to medical records. The HIPAA Privacy Rule specifically states that: "Except in certain circumstances, individuals have the right to inspect and obtain a copy of their personal health information in a covered entity's designated record set." . ” (HHS, 2003, p. 12) Before adopting this confidentiality rule, medical practices could simply provide information or make copies of patient records without any written documentation. Patients and their family members can easily access their information. Pursuant to the HIPAA Privacy Rule, a patient's personal health information is confidential and may not be used or disclosed without appropriate authorization. However, certain circumstances allow your protected health information to be used or disclosed in a way that is not related to health care. These circumstances are: 1. Required by law; 2...... middle of paper ...... joined the staff of the covered entity, such employee must be trained in the policy and procedures within a reasonable time. Training on privacy policies, the procedures for following those policies, and the order in which records should be maintained and disposed of should be one of the primary training topics for office staff. “HIPAA training should occur every six months to a year, depending on changes in the law, regulations or guidelines.” (Ehow.com) Works Cited http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/privacysummary.pdf OCR Privacy Rule Summary 2003 pg.11pg.14; page 18 for #445 CFR §160.103.6745 CFR § 164.530(b).6845 CFR § 164.530(e)Pub. L. 104-191; 42 USC §1320d-6.http://www.datatrace.com/training/hippa_additional_information.htmhttp://www.ehow.com/way_5682833_hipaa-training-employees_.html