Health care organizations develop operational policies and procedures that not only meet the organizations purpose and mission but that are also compliant with state and federal regulations.This week differences between a law and policy are investigated. We will investigate how a policy is developed from regulations, which are based on a specific law(s) designed to protect confidentiality and secure protected health information (PHI).