Keeping current on the ever-changing landscape of laws and regulations governing the privacy of medical records is a necessary evil of healthcare. This presentation will discuss briefly the requirements under HIPAA for Covered Entities and Business Associates, as well as the Federal Trade Commission's involvement in healthcare data privacy beyond HIPAA, such as implications in social media. Finally, the presentation will provide some best practice that should be implemented to ensure compliance with the various laws and regulations.