The Health Insurance Portability and Accountability Act (HIPAA) is a federal law enacted in 1996 that provides data privacy and security provisions for safeguarding medical information. HIPAA applies to all forms of protected health information (PHI), whether electronic, written, or oral.