What does the HIPAA Security Rule require? The HIPAA Security Rule establishes administrative, physical, and technical safeguards for electronic protected health information (PHI) . Its administrative safeguards include the security awareness and training standard under 45 CFR § 164.308(a)(5) .