This Notice discusses the effect of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Regulations, 45 C.F.R. parts 160 and 164, when the Service requests protected health information from a taxpayer or third party. Under these regulations, the Service will generally have additional burdens when requesting protected health information from a “covered entity” or a covered entity’s business associate. There are three exceptions that allow the Service to obtain protected health information while enforcing the Internal Revenue Code: the consent of the taxpayer, the law enforcement exception, and the administrative and judicial proceedings exception. This Notice discusses the standards for applying these exceptions.