HIPAA: HHS Security Guidance Targets Electronic PHI

Why This Topic Matters

Facilities that allow staff to use laptops, portable media, or offsite connections can face privacy and security risk if protections are weak. Understanding the guidance helps organizations evaluate policies and technology practices that support HIPAA compliance.

Article Sections

1. HHS security guidance and HIPAA oversight

   Introduces the federal security guidance and its relationship to HIPAA enforcement and compliance expectations for covered entities.

2. Device and media safeguards

   Reviews broad safeguards for laptops, portable devices, removable media, passwords, locking controls, and encryption when information is stored or accessed offsite.

3. Use secure connections when offsite

   Discusses general precautions for remote access, wireless connectivity, and other offsite communication methods used to reach facility systems.