The Health Information Protection Act requires a trustee to protect the privacy of personal health information in their custody and to respect the rights of individuals identified in the Act. Trustees must follow all the rules regarding collection, use, disclosure, storage, retention and destruction of records containing personal health information.