Frameworks / Privacy / Profiles
HIPAA (US health information)
Included in US Privacy · Anchored on CCPA/CPRA · Incorporates US state privacy laws, HIPAA, COPPA, NIST Privacy Framework
HIPAA privacy, security and breach notification obligations with HITECH and Part 2, for covered entities and business associates.
The standard tells you what is required; the framework tells you how to do it, whether you've done enough to certify, and how to keep getting better.
Included in
US Privacy
US Privacy incorporates HIPAA as a Secondary standard, where the Primary leaves gaps; the profile shows the controls that cite it.
Anchored on CCPA/CPRA · Incorporates US state privacy laws, HIPAA, COPPA, NIST Privacy Framework
A profile isn't sold on its own: it comes with the topic framework, in the Core and Professional editions. In APEX, it is the Certification view filtered to HIPAA.
Need to govern against HIPAA?
Tell us where your programme is today and we'll point you to the right framework and edition.
Enquire about US PrivacyStandards are referenced by clause, not reproduced. Names of standards and laws are trademarks of their owners; DP Frameworks is not affiliated with or endorsed by any standards body or regulator. Frameworks support governance and readiness; they are not legal advice or a regulatory submission.