Policies and practices aimed at ensuring the confidentiality, integrity, and availability of patients' personal health information.