They aren't just random. They give away specific information about your card and where it comes from. The first digit of your credit card number is the industry identifier. This tells you the industry of the credit card issuer. For example, airline industry cards begin with a 1 or a 2. Travel or entertainment cards, such as American Express and Diners Club cards, begin with a 3.
One of the most significant amendments to HIPAA by the HITECH Act is the expansion of the categories of entities subject to the 1996 law's privacy and security rules. Plans and health care clearinghouses are also affected by HITECH, along with their business associates and certain vendors of HIT.
HIPAA was expanded by the Health Information Technology for Economic and Clinical Health Act in 2009. HIPAA and HITECH establish a set of federal standards intended to protect the security and privacy of PHI. These provisions are included in what are known as the Administrative Simplification rules. HIPAA and HITECH impose requirements related to the use and disclosure of PHI, appropriate safeguards to protect PHI, individual rights, and administrative responsibilities.