Additionally, HIPAA gives individuals rights to their protected health information, and requires covered entities to provide individuals with a Notice of Privacy Practices and train their workforce members, including volunteers, so that they understand privacy policies and procedures.