http://www.hhs.gov/ocr/hipaa/privacy.html
http://www.cms.gov/hipaa/
http://www.hhs.gov/ocr/privacysummary.pdf