HealthIT Answers December 7, 2021
By Art Gross, President and CEO, HIPAA Secure Now!
The HIPAA Security Rule requires healthcare providers and their business associates to implement physical, technical, and administrative safeguards to protect the electronic Protected Health Information (PHI) that they utilize. It establishes national standards to protect that information. These standards apply not just to covered entities, but any organization that handles PHI – including subcontractors and business associates.
Administrative safeguards (also called “administrative security”) are procedures, or policies, that ensure compliance with HIPAA’s administrative simplification rules. They compromise over half of the requirements of the HIPAA Security Rule and refer to organizational security measures. These security measures are extensions of the security management process within a business.
These standards are for all...