The US Congress created the HIPAA bill in 1996 due to public concerns about how their private information was being used. This is the Health Insurance Portability and Accountability Act, which Congress created to protect the privacy, confidentiality, and security of patient information. It also involved transmitting health documents electronically. HIPAA is a privacy rule that gives patients control over their health information. Patients must give their permission. Any health care provider may disclose any information in the individual's medical record. This helps limit protected health information (PHI) to minimize the risk of inappropriate disclosure. It establishes national-level standards that healthcare providers must adhere to and strictly investigates compliance-related issues while subjecting violators to civil or criminal penalties if they violate the privacy of a person's PHI . HIPAA also imposes limits on the use and disclosure of health records by covered entities; a healthcare provider, a health plan, and a healthcare clearinghouse. It also supports the cause of disclosing PHI without an individual's consent for individual health needs, public interest, and national interests. The portability portion of HIPAA guarantees patient health insurance to employees after they lose their jobs, ensuring that health insurance providers cannot discriminate against people based on their health condition or pre-existing condition, and protect their files when sending them electronically. The Privacy Rule protects individuals' health information and requires medical providers to obtain consent for the release of any medical information and explain how private health records are protected. It also allows patients to receive their medical records from any... middle of paper ...... by leaving the computer screen blank and/or turning off the computer so that the Customers can't see what's on the screen, and using a secure network to receive new prescriptions or request refills. A patient must be informed and give permission to allow a list of their medications to be given to a marketing company. The authorization must indicate for what purpose the disclosure and use of the data is intended and the date on which the authorization will expire. In a community practice, a pharmacist cannot discuss treatment with anyone unless the patient signs an authorization. In an institutional practice, the patient can call the pharmacist and give them permission to speak to a doctor if they are able to speak. In an emergency, such as a heart attack or car accident, the doctor may call the pharmacist to obtain the information without the patient's consent. A patient must give written authorization at a community pharmacy.