Reader Questions: Implement Mobile Device HIPAA Security

Why This Topic Matters

Mobile devices can create compliance and security exposure if they are not managed consistently. This article helps readers understand the main categories of safeguards that can reduce risk to patient information and support a practice’s HIPAA security efforts.

Article Sections

1. Question

   Introduces the reader’s request for general guidance on securing mobile devices and protecting patient information in a practice setting.

2. Answer

   Provides an overview of practical mobile device security measures for healthcare organizations. The section frames the article’s guidance at a high level before moving into specific areas of concern.

3. Tip 1

   Discusses planning for mobile device use in the practice, including who uses devices and how access is managed. It also addresses organizational considerations for personal devices used for work and references HHS ONC guidance.

4. Tip 2

   Covers basic device authentication and the use of tools that help manage access credentials. The emphasis is on strengthening account security for mobile devices.

5. Tip 3

   Describes adding an additional authentication layer to mobile device security practices. The section explains the broader purpose of using more than one verification method.

6. Tip 4

   Addresses protecting information through device encryption. The discussion centers on safeguarding data stored on and transmitted by mobile devices.

7. Tip 5

   Reviews categories of security software and protective tools that may be used on mobile devices. It also notes the importance of working with IT professionals to install, enable, and maintain those protections.