The Privateness Rule outlines how PHI can be utilized and disclosed. It restrictions use of individual info to licensed events when making sure people can perspective and ask for variations for their data. Also, a good thing about HITRUST is HIPAA might be layered on utilizing the r2 certification, which https://www.auditpeak.com/how-to-pass-a-hipaa-compliance-audit-in-2025/