Excerpt: The Department of Health and Human Services (HHS) issued 45 pages of its long-awaited final enforcement rule governing the HIPAA privacy, security and related rules, calling it a regulation with 'extremely broad implications' for healthcare. The final ruling was released on February 16, 2006 and it details how HHS will define violations, determine culpability and the steps that organizations may take to protect themselves.