included in a patient's health file
that is protected under HIPAA and not available to unauthorized parties. This also includes information that the patient provided for a specific purposes whether it be electronically, orally, or via written documentation
. The responsibility
falls on the entity
and its third-party
affiliates that handle
the information. Protected health information can be released at the request of the patient.