HIPAA: Health Insurance Portability and Accountability Act of 1996 - Primary federal law governing medical privacy and security of protected health information
HITECH Act: Health Information Technology for Economic and Clinical Health Act - Expands HIPAA rules and increases penalties for violations
HIPAA Privacy and Security Rules: Specific regulations under HIPAA that establish national standards for the security and privacy of electronic protected health information
ADA: Americans with Disabilities Act - Includes provisions about confidentiality of medical information in employment context
GINA: Genetic Information Nondiscrimination Act - Protects against discrimination based on genetic information and includes privacy provisions
State Privacy Laws: State-specific legislation that may impose additional or more stringent requirements than federal laws for medical privacy
State Record Retention Laws: State-specific requirements for how long medical records must be maintained and how they must be stored
State Breach Notification Laws: State-specific requirements for notifying individuals and authorities in case of medical data breaches
Medical Ethics Guidelines: Professional standards and ethical requirements for maintaining patient confidentiality in healthcare settings
42 CFR Part 2: Substance Abuse Confidentiality Regulations - Federal regulations governing confidentiality of substance use disorder patient records
FERPA: Family Educational Rights and Privacy Act - Relevant when medical information intersects with educational institutions
FTC Regulations: Federal Trade Commission regulations pertaining to privacy and security of consumer health information
