It’s an indication of the degree to which a provider’s practice complies with guidelines set by HIPAA.