Technology Tips for HIPAA Compliance: Overview 

While HIPAA does not include any specific technologies in its requirements, it is easy to connect dots between the HIPAA rules, guidance from the National Institute of Standards and Technology (NIST,) and HIPAA enforcement actions. 

There are some things you shouldn’t have to be compliant with HIPAA, some you should have, and you cannot ever assume that the security tools you deploy to protect patient data will continue to work without interruption. 

Things You Shouldn’t Have 

  • Workgroup network
  • Home Operating System
  • Simple Router (like the ones that you get with your Internet service)
  • XP or Windows 7 (after January 14, 2020)
  • Webmail
  • Unsecured smart phone

Things You Should Have 

  • Domain
  • Professional Computer Operating System
  • Firewall
  • Secure e-mail
  • Secure wireless

Where Can I Get More Information?

HIPAA Business Associates: Myths & Facts 

Cloud Storage Providers Storing Protected Health Information May Be Obligated to Comply with HIPAA

 

Semel Consulting works with Covered Entities, Business Associates, and Subcontractors to properly manage HIPAA compliance.

 

MIKE SEMEL  |  www.SemelConsulting.com