The new rules in the Health Insurance Portability and Accountability Act (HIPAA) include changes to the definition of “breach,” regulatory enforcement provisions, requirements for notices of privacy practices, and the sale of protected health information (PHI).he new rules in the Health Insurance Portability and Accountability Act (HIPAA) include changes to the definition of “breach,” regulatory enforcement provisions, requirements for notices of privacy practices, and the sale of protected health information (PHI).