1. Confidentiality. 2. Free from observation such as closed doors, drawn curtains around a hospital bed. 3. Under the Health Insurance Portability and Accountability Act (HIPAA), use and disclosure of protected health information is permissible for treatment, payment, or health care operations (TPO).

Federal legislation that became effective on September 27, 1975, and established an individual’s right to review his or her medical records maintained by a federal medical care facility such as a VA medical center or U.S. Public Health Service facility and to contest inaccuracies in such records. This act also began to limit government use of the Social Security number. Some federal agencies or federally funded institutions may be regulated by both the Privacy Act and the HIPAA standards. Such entities are required to comply with both sets of regulations. Although the HIPAA standards generally provide more restrictive regulations, entities are advised to revise their policies and procedures to comply with both the HIPAA standards and the Privacy Act.

Under the Health Insurance Portability and Accountability Act (HIPAA), an individual designated to help the provider remain in compliance by setting policies and procedures (P & P) and by training and managing the staff regarding HIPAA and patient rights. The PO is usually the contact person for questions and complaints. Also known as privacy official (PO).