Rural hospitals in this study recognized the importance of ensuring the confidentiality of patient health information, and have made substantial progress in achieving compliance with HIPAA privacy standards. Although these rural hospitals were using the flexibility afforded to them under HIPAA to develop common-sense approaches, each recognized that additional work will be required to effectively secure patient privacy, particularly as technology and the need for information advance. A policy brief is also available. Report available on request by contacting the Center.