3 ms·
I honestly don't know what you mean by this but I'd be curious to hear an elaboration
by TomOfTTB 17y ago
I honestly don't know what you mean by this but I'd be curious to hear an elaboration
- tptacek 17y agoHIPAA requires you to encrypt medical information. (Also, lots of heavily HIPAA-regulated places allow IM.)
- dkokelley 17y agothey allow for encrypted transfer of files and hence represent a risk to medical records This could go either way, actually. Unencrypted transfer of files is obviously risky and if it's through a 3rd party provider (AOL, GTalk, etc.) then there is a risk of confidential medical information being intercepted. Alternatively, maybe there needs to be internal records of who has sent or received which files. Encrypting files makes it harder for the administration to know who has what. I'm leaning towards the first explanation of the danger of unencrypted file exchange, but I could be wrong.
- tptacek 17y agoHIPAA isn't like GLBA; it doesn't have the tracking requirement. It's just unusually explicit that PHI needs to be encrypted in flight.