The Health Insurance Portability and Accountability Act (HIPAA) of 1996 has been praised and criticized for asserting federal authority to regulate health insurance. The authors review the history of federalism and insurance regulation and find that HIPAA is less of a departure from traditional federal authority than it is an application of existing tools to meet evolving health policy goals.