PHI is protected under various laws and regulations, the most notable being the Health Insurance Portability and Accountability Act (HIPAA) in the United States. HIPAA sets standards for the protection of health information and ensures that patient data is handled with confidentiality and integrity. Healthcare providers must follow strict guidelines to prevent unauthorized access, use, or disclosure of PHI.