The privacy rules and confidentiality of medical information contained in HIPAA apply to any health information being held or transferred that allows for the individual identification of a person. Health information can be stored in any form, including digitally.