Personal privacy and common goods: a framework for balancing under the national health information privacy rule.

Standards for Privacy of Individually Identifiable Health Information ("health data privacy regulations")' pursuant to a congressional mandate in the Health Insurance Portability and Accountability Act of 1996 (HIPAA). 2 These regulations, promulgated by the Department of Health and Human Services (DHHS), represent the first systematic national privacy protec-tions of health information. They protect the privacy of individually identifiable health records in any form (e.g., electronic, paper, and oral) through access, use, and disclosure limitations, fair information practices, and privacy and security policies.