Health care organizations develop operational policies and procedures that not only meet the organization’s purpose and mission but that are also compliant with state and federal regulations. This week differences between a law and policy are investigated. We will investigate how a policy is developed from regulations, which are based on a specific law(s) designed to protect confidentiality and secure protected health information (PHI).