Finally, 15 (63%) PHR systems were based on regulations or principles such as the US Health Insurance Portability and Accountability Act (HIPAA) and the Health on the Net Foundation Code of Conduct (HONcode).ConclusionsMost privacy policies of PHR systems do not provide an in-depth description of the security measures that they use.