HIPAA protects the privacy and security of people’s health information. It limits how we use and share this information while giving patients more control over their health information. It’s important for covered entities, their business associates, and subcontractors to fully comply with HIPAA’s requirements in order to maintain the integrity and security of protected health information and also avoid costly violation penalties.