Implementing the security and privacy measures called for by the HIPAA regulations. 2009 brings new challenges reagrding information security and privacy Regulations. This document was developed to help organizations that handle PHI address the HIPAA security and privacy regulations.