A regulation under the Health Insurance Portability and Accountability Act (HIPAA) that governs the use and disclosure of protected health information.