The Department of Health and Human Services provides a summary of the HIPAA privacy rule on its website.