What medical rules, laws, and regulations allow you to collect my data? What laws do you need to follow?

HIPAA Privacy Rule (Treatment): lets your care team access and share your health info for treatment without a separate permission form.

HIPAA Security Rule: sets the security bar (access controls, encryption, audits) for protecting electronic health data.

HIPAA Breach Notification Rule: if unsecured data were ever compromised, you must be notified and regulators informed.