Impose restrictions on use and disclosures of personal information.

Gives patients greater access to their medical records.

 Gives patients greater protection of their medical records. Primary focus of the Privacy Rule is to assure that individuals health information is properly protected while allowing the flow of health information needed to provide and promote high quality health care and to protect the public’s health and well-being. The privacy rule applies to healthcare providers, health plans, or healthcare clearinghouse. These are called “covered entities.” A “covered entity” may not use or disclose protected health information, except either (1) as the Privacy Rule permits or requires; or (2) as the individual who is the subject of the information (or the individual’s personal representative) authorizes in writing. entities.” A “covered entity” may not use or disclose protected health information, except either (1) as the Privacy Rule permits or requires; or (2) as the individual who is the subject of the information (or the individual’s personal representative) authorizes in writing.