On February 20, 2003, the Department of of Health and Human Services (HHS) adopted the final regulations for security requirements of electronic health information under HIPAA.  The final rule specifies the administrative, technical and physical requirements for covered entities to use in safeguarding protected health information. Complete information about the February 20, 2003 final security rule can be found at www.access.gpo.gov/su_docs/fedreg/a030220c.html.