HIPAA outlines standards and requirements developed by the Department of Health and Human Services for the maintenance and transmission of health information that identifies individual patients. It applies to any business that has access to, or, is processing individually identifiable health information. All individually identifiable healthcare information processed by any business entity must be proactively safeguarded.