3 ms·
HIPAA does require the data to be stored in a secured way. It also requires a certain level of security to get to the data. Don't let the name fool you. Your s
by jamra 11y ago
HIPAA does require the data to be stored in a secured way. It also requires a certain level of security to get to the data. Don't let the name fool you.
Your second point is extremely valid. You can't really restrict a medical professional from looking up health information. It could cause loss of life. Mostly, a large organization can't be expected to lock down the data of an individual.
What you can do is log the access (GxP regulations). This means that you will know who accessed the data after the fact.
- dragonwriter 11y ago> HIPAA does require the data to be stored in a secured way. But its extremely unspecific about what that means. > It also requires a certain level of security to get to the data. Less so than you probably think. It has vague high level standards, under which are lower-level implementation specifications (which still tend to be somewhat vague) which may be required or "addressable", which basically means that organizations are required to review whether they are appropriate; the only technical implementation specifications that are required in the security rule are having unique user IDs and having emergency access procedures.