What is HIPAA and what does it protect?

Last updated September 3, 2026.

The federal health-privacy law, per HHS: providers, insurers, and their partners cannot share your identifiable health information without your written authorization - with narrow exceptions for treatment, payment, operations, and specific public-interest carve-outs. Your rights: see and copy your records (30-day response), request corrections, get some disclosure accounting, complain to HHS. The surprises - not covered: most employers, health apps not tied to a provider, authorizations you sign, and what you share yourself. The daily-work rights: your records are yours to see, and sharing them needs your say-so.

HIPAA in plain terms

Start a free AI doctor consult →

What to do

Related questions

Sources

Pymander is not a replacement for a physician and does not provide medical advice, diagnosis, or treatment.

Free AI doctor, 24/7 by textStart a free AI doctor consult