Compliance Glossary

The HIPAA Security Rule defines three crucial standards for safeguarding health information:

Administrative Safeguards

These safeguards are vital to manage security measures and protect ePHI. Usually, a designated security officer oversees these actions which include risk assessments, access controls, incident response, and security awareness training.

Physical Safeguards

These measures focus on securing buildings, equipment, and information systems. They involve controlling access, verifying identities, and data backup before you decide on equipment or proper hardware disposal.

Technical Safeguards

This aspect revolves around technology usage, policies, and procedures. It covers audit controls, user verification, and automatic log-off to prevent unauthorized access. In this safeguard, encryption plays a significant role in protecting ePHI from breaches.