- Privacy Rule: This rule sets standards for the protection of PHI. - Security Rule: This rule specifies safeguards to ensure the confidentiality, integrity, and availability of electronic PHI. - Breach Notification Rule: This rule requires covered entities to notify affected individuals, the Secretary of Health and Human Services, and, in some cases, the media of a breach of unsecured PHI.