Entities with access to health information (health insurance providers, medical professionals, employers) included under the Health Insurance Portability and Accountability Act (HIPAA) are required to comply certain rules regarding the protection and sharing of individually identifiable health information.
To be HIPAA compliant, employers need to ensure that they are taking measures to ensure that all protected health information (PHI) data is kept secure at all times. This includes creating and implementing policies and procedures regarding information security and privacy, communicating these policies to employees and regularly auditing policies and procedures.
Related Resources
Articles
03.29.2023