HIPAA
The Health Insurance Portability and Accountability Act — federal law establishing privacy and security standards for protected health information (PHI). Home care agencies that handle client health data must comply with HIPAA's Privacy and Security Rules.
Also known as: HIPAA · privacy rule · security rule · PHI · protected health information · health information privacy
HIPAA establishes national standards for protecting individually identifiable health information, called Protected Health Information (PHI). The Privacy Rule governs who may access PHI and under what conditions. The Security Rule specifies safeguards for electronic PHI (ePHI).
For home care agencies, HIPAA compliance requires: written privacy policies, staff training on PHI handling, secure storage of client records, caregiver confidentiality agreements, breach notification procedures, and restrictions on sharing client information without consent.
Note: non-medical home care agencies that do not bill health insurance may technically fall outside HIPAA as a "covered entity," but HIPAA-aligned practices are widely considered a standard of care and are often required by payer contracts.
In home care, this means…
Affects how client health information is stored, accessed, transmitted, and disclosed. Staff training on HIPAA is a compliance requirement for most payer programs.
Related terms
Compliance →
Adherence to applicable laws, regulations, payer requirements, and agency policies. In home care, compliance spans licensing, caregiver certification, EVV, billing accuracy, documentation standards, and mandatory reporting obligations.
Training →
Structured educational programs for caregivers covering orientation, compliance requirements, care skills, and specialty topics. Training is a compliance obligation, a quality investment, and a retention lever.
Shadow AI →
The unsanctioned use of consumer AI tools (such as ChatGPT or Claude) for work purposes by employees, without agency approval or HIPAA safeguards. Shadow AI is a significant and growing compliance risk in home care.
Licensing →
State registration or licensure of a home care agency to operate legally. Requirements vary significantly by state — some require a formal license with inspections and ongoing compliance; others have minimal registration requirements.