The HIPAA Privacy and Security Rules require covered entities (including healthcare providers and health plans) and their business associates to protect patient ...