A Guide to Protecting Patient Data Data compliance in healthcare is the practice of following the laws, regulations, and standards that govern how patient health information is collected, stored, transmitted and used. It encompasses the regulatory framework of statutes including HIPAA, the HITECH Act, and the EU’s GDPR, as well as the technical and administrative controls required to satisfy those mandates. Effective compliance depends on an operational discipline of keeping protected health information (PHI) and electronic protected health information (ePHI) out of the wrong hands, while ensu