The Health Insurance Portability and Accountability Act of 1996 (HIPAA) was put into place to protect the privacy of patients in the medical realm. The HIPAA security rule, “Security Standards for the Protection of Electronic Protected Health Information”, found at 45 CFR Part 160 and Part 164, Subparts A and C, details how to handle private medical information electronically.
What does your business need to do?
- Assess current security, risks, and gaps.
- Develop an implementation plan.
- Implement solutions.
- Document decisions.
- Reassess periodically.
Read more on the HIPAA Security rule