Several laws and regulations govern patient confidentiality. In the United States, the Health Insurance Portability and Accountability Act (HIPAA) sets the standard for protecting sensitive patient information. In Europe, the General Data Protection Regulation (GDPR) provides guidelines on data privacy and security.