Data Privacy and Security

There are two major HIPAA sections:

• HIPAA Privacy Rules ensure the protection of confidentiality of patient medical data
• HIPAA Security Rules ensure security, confidentiality, and availability of medical data

HIPAA Privacy Rules protect “personal or protected health information” or PHI. Special attention is paid to data that is managed or sent from organizations through email. The objective of HIPAA Privacy Rules is to detect and terminate any circumstances in which PHI can be used or disclosed without the knowledge of patients. Organizations should also be able to provide access to PHI, as well as data relating to personal data disclosure, upon the request of third parties, or organizations to the patient, or his/her representative.

HIPAA Security Rules also establish several basic principles for organizations. It is imperative to guarantee the confidentiality, integrity, and availability of all PHI that is created, received, managed or transferred by the organization. In addition, this information shall be protected from security and integrity threats, inadmissible use, or disclosure. Backup is a means of protection from such risks.

How can Computicate PSA help?

If you work in the healthcare industry or serve healthcare clients, then the software you use plays a role in helping you comply with HIPAA. While it’s ultimately up to employees and the organization to meet the standards of the Health Insurance Portability and Accountability Act (HIPAA), using the right software can help relax your mental load. Computicate PSA provides a cloud-based software solution to help IT service providers grow their business, and some of our product features may help you with your compliance efforts.

Security features include:

• Encryption of all data in transit through SSL
• Encryption of all data at rest

 

WE CAN PROVIDE A BAA OR SAC UPON REQUEST

Cloud Backup and Electronic Protected Health Info

Key requirements when handling sensitive electronic Protected Health Information (ePHI) include:

Physical Safeguards like limiting access and control of facilities like workstations, data processing centers, and any devices with ePHI.

Administrative Safeguards like creating and enforcing security policies, periodic risk review and analysis, and provide training.

Technical Safeguards like utilizing unique user identification numbers, having an emergency procedure, and data encryption and decryption