MediStreams’ internal controls follow the standards provided in the Privacy Rule and Security Rule as found within the United States’ Department of Health and Human Services’ (HHS) Health Insurance Portability and Accountability Act of 1996 (HIPAA). The HIPAA Privacy Rule provides guidance on how individually identifiable health information may be used within an organization and disclosed outside of the organization. The HIPAA Security Rule sets national standards for securing electronically protected health information from unauthorized access and use.