When handling protected health information, “covered entities,” such as healthcare providers, health plans, and clearinghouses, as well as their business partners, are subject to the law (PHI). Meeting HIPAA (Health Insurance Portability and Accountability Act) requirements are referred to as being in compliance with the law. HIPAA is a federal law in the United States that sets standards for the protection of certain health information.