Tip: Take these steps after encrypting your data
HIPAA Weekly Advisor, February 9, 2009
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
If you are in the process of encrypting your data to protect it from outside parties, take the following steps before and after proceeding with data encryption:
- Identify the types of confidential information that you need to encrypt before transmitting or physically transporting it outside of the organization, including patient data or PHI, Social Security numbers (employees’ or patients’), credit card data or cardholder information, and other sensitive or proprietary information (e.g., financial or personnel information).
- Identify the types of devices or media that could or do contain confidential information. This includes devices such as laptops, notebooks, tablets, and any hand-held computing device, such as a smart phone or portable media including PDA, CD-ROMs, DVDs, computer hard drives, external or portable hard drives, ZIP drives, floppy disks, backup tapes, and other memory devices (e.g., USB-flash drives, thumb drives, jump drives)
- Make encryption easy to use. Therefore, it is best to organize a cross-sectional team of technical and clinical staff members, as well as the compliance, privacy, and information security officers. The team should evaluate the top three products that the technical staff members recommend.
Editor’s note: These tips are offered by Tom Walsh, CISSP, of Tom Walsh Consulting in Overland Park, KS, in the February edition of Briefings on HIPAA, the HCPro, Inc. newsletter.
Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!
Comments
0 comments on “Tip: Take these steps after encrypting your data ”
Related Products
Most Popular
- Articles
-
- HIPAA Q&A: Flu shot requirement for hospital employees
- HealthDataInsights posts new issues for medical necessity claims
- Q&A: Incidental disclosures and patient privacy
- New FAQ posted on storing laryngoscope blades
- Sneak Peek: Effort underway to establish caseload benchmarks
- Running an effective peer review committee meeting
- Tip: Perform your own internal investigation prior to government audit
- What does case-mix index mean to you?
- HIPAA 5010 deadline extended, but threat remains, says AMA
- HHS task force: Consider privacy, security with text messages
- E-mailed
-
- HIPAA Q&A: Flu shot requirement for hospital employees
- Running an effective peer review committee meeting
- What does case-mix index mean to you?
- Featured blog post: Nurses face felony charges after reporting physician to the Texas Medical Board
- HHS task force: Consider privacy, security with text messages
- Tip: Correctly code bilateral pain management procedures
- Tip: Know the common bunionectomy procedure codes and how to use them
- Code changes should help ease the pain when coding for facet joint injections
- 2012 CPT code changes for ASCs: Shoulder and knee scopes and pain management
- Documentation and coding for toxic metabolic encephalopathy
- Searched