HIPAA is a federal law that establishes national standards on how health plans, health care clearinghouses, and health care providers (“Covered Entities”) access, use, or disclose patient information called “Protected Health Information” or “PHI”. The national standards established under HIPAA may also extend to subcontractors that provide services to Covered Entities (“Business Associates”) or their subcontractors (“Business Associate Subcontractors”) whoever come into contact with PHI on their behalf. HIPAA is enforced by the US Department of Health and Human Services.