Regulations that protect patients' personal health information from unauthorized access and disclosure.