HIPAA (Health Insurance Portability and Accountability Act) Technical Safeguards
Controlling access to computer systems and enabling covered entities to protect communications containing PHI transmitted electronically over open networks from being intercepted by anyone other than the intended recipient.
-
Access Control
164.312(a)(1) - Implement technical policies and procedures for electronic information systems that maintain electronic protected health information to allow access only to those persons or software programs that have been granted access rights as specified in § 164.308(a)(4)[Information Access Management].
-
Audit Controls
164.312(b) - Implement hardware, software, and/or procedural mechanisms that record and examine activity in information systems that contain or use electronic protected health information.
-
Integrity
164.312(c)(1) - Implement policies and procedures to protect electronic protected health information from improper alteration or destruction.
-
Person or Entity Authentication
164.312(d) - Implement procedures to verify that a person or entity seeking access to electronic protected health information is the one claimed.
-
Transmission Security
164.312(e)(1) - Implement technical security measures to guard against unauthorized access to electronic protected health information that is being transmitted over an electronic communications network.
Need help putting this into practice? See our HIPAA compliance services or read our HIPAA articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo