Rural hospitals in this study recognized the importance of ensuring the confidentiality of patient health information, and have made substantial progress in achieving compliance with HIPAA privacy standards. Although these rural hospitals were using the flexibility afforded to them under HIPAA to develop common-sense approaches, each recognized that additional work will be required to effectively secure patient privacy, particularly as technology and the need for information advance. A full report is also available.