How can the tradition of patient-provider confidentiality be preserved and still meet the changing information needs of insurers, employers, public health agencies, policy analysts, and researchers? As countries grapple with the issue of a patient's right to medical record privacy, actions that the U.S. takes in this area will set precedents and have implications for nearly every health care electronic transaction. The Health Insurance Portability and Accountability Act requires the Secretary of Health and Human Services (HHS) to recommend standards for electronic financial and administrative transactions. The HHS focused on the confidentially of patient's health care information, guided by five principles in developing recommendations: (1) Boundaries; (2) Security; (3) Consumer Control; (4) Accountability; and (5) Public Responsibility.