Tag Info

New answers tagged

1

Disclaimer; I haven't done HIPAA work for over a decade, and reality may vary from history. I welcome comments and alternative answers from someone currently working in the space. The encryption specifications of HIPAA are "addressable", which is to say, they're not "required". You can choose to do something else as long as you document in writing that ...


3

Disclaimer: My company makes a HIPAA-compliant iPod application. I'm responsible for the compliance... The iPhone actually meets many HIPAA requirements out of the box. Once a passcode is set on the device, the contents are encrypted -- which takes care of many HIPAA requirements, notably encryption at rest. For downloading the data, you must use a TLS ...


0

I think your question is "How to perform offline authentication and authorization on an untrusted device?". The short answer to this question is: you cannot. The long answer is: some guys tried to work around this problem, for blue-rays players and video game consoles. To solve the problem they try to make the untrusted device a trusted one, by preventing ...


0

While I am soon going to begin a career dealing with HIPAA, and have therefore been brushing up, I thus far only have experience with PCI compliance. That being said my understanding of what I've looked into so far seems to indicate that both the ePHI itself and metadata of that ePHI (creation date/time, filename, last mod date --- ref. ...



Top 50 recent answers are included