New federal regulations addressing medical privacy rights under the Health Insurance Portability and Accountability Act (HIPAA) have been published in the Federal Register. Group health plans generally have until April 14, 2003, to comply with the new rules.