scope:

1.1 This guide covers the principles for confidentiality, privacy, access and security of person identifiable health information. The focus of this standard is computer-based systems, however, many of the principles outlined in this guide also apply to health information and patient records that are not in an electronic format. Basic principles and ethical practices for handling confidentiality, access, and security of health information are contained in a myriad of federal and state laws, rules and regulations, and in ethical statements of professional conduct. Although there are many sources for guidance, there is no current national standard guide on this topic.