| |
Security Rule
Background
Administrative Safeguards
Physical Safeguards
Technical Safeguards
User Responsibilities
Acceptable Uses of Electronic Resources
Specific Rules on NON-Acceptable Use of Electronic Resources
While closely linked, the HIPAA (Health Information Portability and Privacy Act) Security regulation is different from the HIPAA Privacy regulation because it applies to the Electronic storage and transmission of Protected Health Information (EPHI), compared with the privacy regulation which applies to all forms of PHI and prescribes more detailed requirements for securing data.
These security guidelines outline minimum standards for ensuring the confidentiality and integrity of electronic protected health information (EPHI) received, maintained or transmitted by the VCU Health System (VCUHS), as well as other offices which support our organization. All VCUHS Department/Entities shall meet or exceed these standards by implementing the necessary administrative, physical and technical safeguards as appropriate based on their assessments of risk.
Electronic protected health information (EPHI) is identifiable health information that is:
• Transmitted by electronic media
• Maintained in electronic media
Electronic media means:
• Electronic storage media including memory devices in computers (hard drives) and any removable/transportable digital memory medium, such as magnetic tape or disk, optical disk or digital memory device; or
• Transmission media used to exchange information already in the form of electronic storage media. Transmission media include, for example, the Internet, Intranet, leased lines, dial-up lines, private networks, and the physical movement of removable/transportable electronic storage media. Certain transmissions, including of paper, via facsimile, and of voice, via telephone, are not considered to be transmissions via electronic media, because the information being exchanged did not exist in electronic form before the transmission.
|
|
