In healthcare, your business is subject to the privacy standards of the Health Insurance Portability and Accountability Act (HIPAA). The goal of HIPAA is to protect personal health information (PHI) that are held by doctors, insurance companies, and pharmacies.