Physical Safeguards

HIPAA Security

Physical Safeguard Compliance

Not compliant

HIPAA Security Compliance

Visit

Security

Device and Media Controls

Written policies and procedures are in place that address the proper disposal of ePHI and/or the hardware on which it was stored.

Read more: Disposal of Electronic Media FAQ, HIPAA Security Rule Compliance, HIPAA Physical Safeguards Standards, Guideline for Media Sanitization

Written policies and procedures and in place that address the propoer removal of ePHI from electronic media before the media is made available for reuse (i.e., previously used laptops or usb drives).

Read more: Disposal of Electronic Media FAQ, HIPAA Security Rule Compliance, HIPAA Physical Safeguards Standards, Guideline for Media Sanitization

Facility Access Controls

Written policy and procedures are in place that, in the event of an emergency, maintain secure and appropriate facility access to RESTORE lost data.

Read more: HIPAA Physical Safeguards Standards, HIPAA Security Rule Compliance, Maintaining Compliance During A Natural Disaster, HIPAA Security Rule Guidance

Written policies and procedures are in place to safeguard the facility and the equipment from unauthorized physical access, tampering, and theft. Common control examples include locked doors, restricted area signs, cameras, alarms, equipment engraving, badges, and escorting patients.

Read more: HIPAA Physical Safeguards Standards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Written policies and procedures are in place that document all repairs and modifications to the physical components of a facility that are related to security (i.e., cameras, security system components, even walls and doors, and locks – including re-keying).

Read more: HIPAA Physical Safeguards Standards, HIPAA Physical Control Maintenance Records, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Physical safeguards are in place for ALL workstations that access E-PHI preventing physical access by unauthorized users, including securing the area where these workstations are located.

Read more: HIPAA Physical Safeguards Standards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

The server has been physically secured in a locked room, cabinet, or cage.

Read more: HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Written policies and procedures are in place that specify proper workstation use, including logging off before leaving the workstation, updating antivirus software, which workstations should have access to ePHI, privacy screens, and remote location requirements.

Read more: HIPAA Physical Safeguards Standards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Organization Type

County