On December 15, 2008, the HHS Office for Civil Rights announced new guidance on how the HIPAA Privacy Rule can facilitate electronic health information exchange in a networked environment. In addition, the guidance addresses electronic access by an individual to his or her protected health information and how the Privacy Rule may apply to the use of personal health records.