Margaret Riley, Professor of Law, Public Health Sciences, and Public Policy, University of Virginia

The Health Insurance Portability and Accountability Act’s Privacy Rule is a federal law prohibiting health care providers, businesses and the people working with them – including administrative staff, laboratories, pharmacies, health insurers and so on – from disclosing your health information without your permission.