Data governance reference materials that have been approved by NACHC for public dissemination are posted here.
NIH guidance on privacy and security/HIPAA for limited data sets:
HIPAA Privacy Rule and Its Impacts on Research