I'm currently writing a web application that will need to be HIPAA compliant.
The following question somewhat applies here:
One of the answers links to this page regarding Security Rule guidance material.
Browser technologies such as localStorage aren't going to be used, and in all cases that I can control it, I'd like to avoid caching any ePHI.
If the user receives some data in the form of JSON, are there ways I can be sure that the information on the client's browser is either erased or encrypted? Is it necessary?