The Truth about HIPAA-HITECH and Data Backup
Dear Data -Diligent Readers,
As a healthcare executive, business owner, a service provider and a Business Associate, few things irritate me more than ill-informed vendors running around making assertions about regulatory or legal requirements that are simply not true and/or making assertions about their products and services being [fill-in-the-blank] law or regulation-compliant when in fact there’s not a circumstance that allows such a condition.
I have written an article entitled “The Truth about HIPAA-HITECH and Data Backup” and offer it to you for your reading pleasure.
Many of the crazy assertions are reappearing around the HIPAA Security Final Rule and what is serving as its “after-burners”, The HITECH ACT. To be clear, there is no such thing as a HIPAA-compliant data center or a HIPAA-compliant server or a HIPAA-compliant data backup product or a HIPAA-compliant EMR software product or a HIPAA-compliant online data backup and recovery service, etc. Only organizations become HIPAA-compliant through comprehensive processes. These organizations include Covered Entities (CEs) and Business Associates (BAs). BAs now fully subject to all aspects of the HIPAA Security Final Rule and The HITECH Act “teeth” put into the HIPAA Security Final Rule.
This article, “The Truth about HIPAA-HITECH and Data Backup”, sets the record straight on a very specific aspect of the HIPAA Security Final Rule – the Data Backup and Disaster Recovery Specifications within the Contingency Plan Standard. We separate myth from reality about what exactly is required of whom by what dates in order to comply with these Specifications.
Also…
View our series of HIPAA Security Law – HITECH Act FAQs…
Attend one of our HIPAA-HITECH Webinars…
Twitter Updates
