Your security and compliance glossary

All the terms you need to know when you’re trying to get compliance audit ready, fast.

Show filters

What is HIPAA?

HIPAA is the acronym for the Health Insurance Portability and Accountability Act passed by Congress in 1996.  HIPAA helps by:

  • Providing the ability to transfer and continue health insurance coverage for millions of American workers and their families when they change or lose their jobs;
  • Reducing health care fraud and abuse;
  • Mandating  industry-wide standards for health care information on electronic billing and other processes;
  • Requiring the protection and confidential handling of protected health information

HIPAA compliance is relevant to Covered Entities and Business Associates. Covered Entities include the following:

  • Healthcare providers - Hospitals, doctors, clinics, psychologists, dentists, chiropractors, nursing homes, and pharmacies
  • Health plans - health insurance companies, HMOs, company health plans, Medicare, and Medicaid
  • Healthcare clearinghouses - an entity that takes in information from a healthcare entity, puts the data into a standard format, and then returns the information to another healthcare entity.

Business Associates are vendors or subcontractors who have access to private health information (PHI). If your company stores or processes PHI, you should be HIPAA  compliant.

Additional resources you might like:

Company news
Blog
Celebrating international momentum at our first-ever VantaCon UK

We’re thrilled to host our first-ever VantaCon UK in London today as we continue to accelerate international momentum and expand our global footprint.

Compliance
Event
How to Automate ISO 27001 & SOC 2 Compliance

Join Vanta’s 45-minute live product demo on 15 May at 1pm AEST. Two of our team members will walk you through the platform and answer questions throughout the session.

Compliance
Event
How to demonstrate secure AI practices with ISO 42001

Join Vanta and A-LIGN for a Coffee and Compliance session on ISO 42001 —what it is, what types of organizations need it, and how it works.

Additional resources you might like:

Company news
Blog
Celebrating international momentum at our first-ever VantaCon UK

We’re thrilled to host our first-ever VantaCon UK in London today as we continue to accelerate international momentum and expand our global footprint.

Compliance
Event
How to Automate ISO 27001 & SOC 2 Compliance

Join Vanta’s 45-minute live product demo on 15 May at 1pm AEST. Two of our team members will walk you through the platform and answer questions throughout the session.

Compliance
Event
How to demonstrate secure AI practices with ISO 42001

Join Vanta and A-LIGN for a Coffee and Compliance session on ISO 42001 —what it is, what types of organizations need it, and how it works.

Security
Guide
Growing pains: How to update and automate outdated security processes

Has your business outgrown its security processes? Learn how to update them in this guide.

Company news
Blog
Celebrating 1,000 reviews on G2 and our first-ever Customer Week

With over 1,000 reviews, Vanta has been named the #1 Leader in G2’s Grid® Report for Security Compliance | Spring 2024.

Compliance
Event
Automating your existing compliance program

With Vanta, you get enough flexibility to choose between a wealth of pre-built content and the ability to customize and configure the product to match your program’s needs. Curious to see this in action?

Compliance
Event
How to automate ISO 27001 & SOC 2 compliance

Join Vanta’s 45-minute live product demo on 25 April at 11 am BST. Two of our team members will walk you through the platform and answer questions throughout the session.

Compliance
Event
ISO 27001 & SOC 2 compliance automation

Join Vanta’s 45-minute live product demo on 10th April at 1pm AEST. Two of our team members will walk you through the platform and answer questions throughout the session.

Compliance
Event
Combating threats through a continuous compliance

In the world of cloud infrastructure, security teams frequently find themselves bouncing between tools to track alignment to compliance standards. What’s more, they must often contend with a lack of visibility into risk and potential threats.

Get compliant and
build trust, fast.

Two wind turbines on a white background.
Get compliant and build trust,
fast.
Get started