Health Care: What HIPAA Means for Data Centers
For the health care industry, the increasing pressure to implement meaningful use, reduce healthcare costs, and improve care outcomes while protecting patient interests has led to strategic review and overhaul by many healthcare providers and vendors. Balancing the benefits of outsourcing data center and hosting services with the risks of engaging an off-premise business associate is daunting. That’s especially true in the wake of penalties and fines imposed by the Department of Health & Human Services and the Office of Civil Rights for PHI (protected health information) breaches. Protecting the confidentiality, integrity, and availability of electronic protected health information (ePHI) is the essence of the HIPAA Security Rule. Since data centers typically store, transmit or process ePHI, they must comply with the HITECH standards and citations to meet HIPAA compliance. The same risk analysis, administrative safeguards, physical safeguards, technical safeguards and ongoing due diligence apply just as much in the ...
Login to comment.