Technical Safeguards

HIPAA Security

Technical Safeguard Compliance

Not compliant

HIPAA Security Compliance

View

Security

Access, Audit, and Integrity Controls

Every employee (system user) has been assigned a unique name and/or number for identifying and tracking user identity anytime ePHI is accessed and/or changed.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Written policies and procedures are in place that establish who should access and the process for obtaining ePHI during an emergency.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

All systems containing ePHI are configured to automatically log off users when their workstations are unattended for a predetermined amount of time (Windows – Power and Sleep Settings; Apple – Privacy & Security Settings).

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

All software and systems that stores ePHI has been reviewed to determine encryption capability and if their encryption and decryption mechanisms are reasonable and appropriate to prevent unauthorized access.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

All systems and software that store or access ePHI have audit controls enabled and record the activity of all users with access.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

All methods of ePHI transmission (email, portal, etc.) are encrypted OR written procedures are in place to require additional precautions (additional email verification, etc.) to ensure information is transmitted to only an authorized person.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

All systems and software that store or access ePHI require login credentials that include password (or PIN) protection, smart card, token, or biometric verification.

Read more: HIPAA Technical Safeguards, HIPAA Security Rule Compliance, HIPAA Security Rule Guidance

Organization Type

County