is a federal law that required

the creation of national standards to protect

sensitive patient health information from being

disclosed without the patient’s consent or

knowledge.