Go to the source: http://www.hhs.gov/ocr/privacy/hipaa/understanding/index.htm...

It's not really that hard. Keep personal data secure when stored and encrypted when in transit.