I'm struggling to find good documentation regarding requirements around security and encryption of patient clinical information when delivered to a patient in electronic format. Patient portals, etc., implicitly have authentication. However, what are the requirements, if any, with respect to encrypting and password-protecting a soft copy of clinical information handed to the patient on a CD, Thumb Drive, etc.?
In general, we have secure exchange and encryption/integrity checking. So my question focuses more on what mandates exist for applying passwords, etc., to an electronic copy of this info.
Right now I'm exploring this topic in the context of implementing MU-compliant solutions to deliver electronic copies of patient clinical info upon request. So this includes a full health record/ccd, a visit summary, discharge instructions, etc.
Thanks! (my first question posted, and have reviewed similar titles and didn't find a match for my inquiry)