| A | B |
| HIPAA | Health Insurance Portability and Accountability Act |
| PHI | protected health information |
| covered entities | health care provides, health plans, health care clearinghouses |
| treatment | provision, coordination, management of health care and related services |
| payment | activities of health care providers to obtain payment or be reimbursed for services |
| health care operations | administrative, financial, legal, and quality improvement |
| minimum necessary | limited info required to accomplish intended purpose of use or disclosure |
| incidental disclosure | individual's health information is overheard or glimpsed at incidentally |
| Privacy Rule | fundamental right to adequate notice of how covered entity may use and disclose protected health information |