Protected Health Information in this system is subject to Public Law 104-191, the Health Insurance Portability and Accountability Act of 1996 and the Final Privacy Rule and Final Security Rule codified in 45 C.F.R. § 160 and 164.