You can find information about the facility's responsibility regarding a patient's PHI in the HIPPAA Privacy and Security Rule.
The Health Insurance Portability and Accountability Act of 1996 or HIPPAA for short is a regulation for providing security and privacy for certain health information. The Privacy Rule and the Security Rule are made by the U.S. Department of Human and Health Services. These rules are made to ensure the privacy and the security of patient's PHI.
