HIPAA requires healthcare providers such as doctors, nurses, pharmacies, hospitals and nursing homes to keep patient health information private. It establishes rules for handling electronic health records and protects discussions between providers. Employees must receive annual training on HIPAA and confidentiality policies and sign an acknowledgement. Violating patient privacy can result in serious consequences like expulsion due to the healthcare organization's zero tolerance policy.