HIPAA provides guidelines to establish the permissible use of an individual’s personal health information (PHI). Seems pretty straightforward for the most part.