Health Insurance Portability and Accountability Act contains a privacy rule that protects an individual's identifiable health information.