Where is protected health information in a organization or nursing home is it everywhere or in a medical record?

I also have another question what 2 rights a patient has that affects the privacy of patient information?

See hipaa.com