Physician practices handle patient records that contain sensitive information—including financial, demographic, and medical data—on a day-to-day basis. This type of information can put a practice, as well as the patient, at risk if not handled properly. Rheumatology practices should make sure that they have policies and procedures in place for keeping and distributing patient records. In fact, the federal Health Insurance Portability and Accountability Act (HIPAA) has set a national standard for the privacy of health information.