Timeline for Is it acceptable for an internal HR site to run over HTTP?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 22, 2017 at 21:03 | comment | added | Ruscal | And while HIPPA compliance is something those dealing with healthcare records in the USA have to keep up with, it isn't something particular relevant to Info Sec in the UK. (OP is discussing a UK company) | |
| Feb 22, 2017 at 19:46 | comment | added | user121968 | HIPAA is a complex set of guidelines and liability for breaches is (AFAIK) decided on a case-by-case basis. There are no strict requirements for encryption, and I'm not familiar enough with the luxsci.com blog to say whether or not they have any authority to make such claims about what the guidelines "imply" about weaker encryption. | |
| Feb 22, 2017 at 19:41 | history | answered | John Wu | CC BY-SA 3.0 |