Much has been written on HIPAA so i will not replicate that here. This is a high level summary to easily address the different areas of focus; HIPAA compliance is following the administrative, technical and physical safeguards  outlined in the

compliance hipaa cybersecurity