Complying with the Health Insurance Portability and Accountability Act. Privacy standards. The Privacy Rule: Limits the use and disclosure of PHI to purposes of treatment, payment, or routine health care operations. Requires covered entities to provide advance notice to the public of its policy gover...