2 ms·
Everyone gripes about HIPAA, but from where I sat, it was a pretty sane standard. Admittedly I wasn't in implementation. But it read a lot like an IETF RFC. "C
by ethbro 8y ago
Everyone gripes about HIPAA, but from where I sat, it was a pretty sane standard. Admittedly I wasn't in implementation.
But it read a lot like an IETF RFC. "Covered entities shall implement network protection." "Covered entities shall not disclose PHI." Outcome-specified, implementation-agnostic. And then set penalties based on whether the breach was accidental / willful / limited / or ongoing.
- dragonwriter 8y ago> Everyone gripes about HIPAA I am not griping about HIPAA. The quality of stone of the specific transaction standards developed by industry groups and adopted as mandatory in regulations implementing HIPAA, OTOH, are another story.