Questions tagged [hipaa]

Health Insurance Portability and Accountability Act, subset of the ASC X12 EDI standard for to transfer of healthcare-related information.

HIPAA in this context refers to the data transmission standards mandated by the U.S. healthcare privacy act. It is based on the 004010 and 005010 versions of the X12 EDI standard, maintained by DISA.

The specific messages involve transferring inquiries, notifications, billing information and procedures between both healthcare providers (such as doctors, hospitals and other services) and billing agencies.

The Washington Publishing Company has the responsibility of publishing the actual standards documents.

97 questions
19
votes
5 answers

Can you create a HIPAA compliant Amazon S3 Web Application?

I am facing some questions when trying to design an S3 application using ASP.NET MVC and trying to stay HIPAA compliant. My initial plan was to require an SSL connection to my web server, encrypt the images on my server, then send them to s3 using…
xkingpin
  • 621
  • 7
  • 16
13
votes
4 answers

Heroku HIPAA Compliance

Is it possible to run apps on Heroku that are HIPAA compliant? More specifically, I need two apps, one that stores member information and another that stores private health information of the members. I intend to encrypt sensitive data using both…
Joseph Ridgway
  • 233
  • 2
  • 8
11
votes
3 answers

Membership Providers and HIPAA Compliance

Does anyone know if the provided SQL and Active Directory Membership Providers in ASP.NET 2.0+ are HIPAA compliant? Clarification: I understand that HIPAA mandates patient information be secured and that certain policies be put in place to secure…
MyItchyChin
  • 12,915
  • 1
  • 21
  • 43
9
votes
6 answers

Overloading a Native PHP Function to Encrypt Data for HIPAA Compliance

Background Information: I'm part of a team of developers that runs a web application that stores and retrieves HIPAA (medical) data. Recently, the HIPAA guidelines were updated to include a policy that requires that all identifying client…
Levi Hackwith
  • 9,002
  • 15
  • 60
  • 111
8
votes
2 answers

What are the database requirements for HIPAA compliance?

I'm using Ruby on Rails 4.2 with mySql for my HIPAA Compliance application and I need to know the technical database requirements for this application. do we really need to encrypt all the database values such as patient name etc?
Nitesh
  • 275
  • 3
  • 9
8
votes
2 answers

HIPAA compliance cloud server setups

There's a recent startup out of YC which seems interesting called Truevault.com, which allows you to store JSON documents in their database via an API and is HIPAA compliant. I am working on a healthcare app, and am wondering which is a better…
Dave Tsay
  • 409
  • 1
  • 5
  • 14
6
votes
0 answers

HIPAA Compliancy, What do I need to know?

Ok so I would for a branding company and we're just scratching the surface of collecting pharma data. I know a bit about HIPAA com pliancy but I guess where I'm fuzzy is.. A). when collecting data via a form, do I need to de-identify the data.. I.e.…
Greg Thompson
  • 816
  • 4
  • 11
  • 30
6
votes
2 answers

iOS: Hiding sensitive information on the screen when app is backgrounded

When a foreground app gets backgrounded (e.g. Home button gets pressed), how can I change elements on the topmost view controller prior to when iOS takes a snapshot of it and starts the animation to show the next screen? I ask because I'm writing an…
curtisdf
  • 3,962
  • 4
  • 26
  • 42
5
votes
1 answer

Anonymizing your application database

I'd like to keep the real names, emails, and any other personal identifiable information out of my primary application database, and in another database/encrypted file. And I'm curious on if there's a best practices solution for this or if I'm…
mrami
  • 51
  • 1
5
votes
4 answers

Is Bluemix HIPAA compliant?

Is IBM Bluemix a HIPAA compliant platform? If yes, please provide me with a link to the official documents stating that. If not when is it expected to be?
Marko
  • 560
  • 5
  • 21
4
votes
1 answer

Is it okay to use Flutter for Hipaa compliant app?

I am working on deciding the technology stack for one of health-related application. We are targetting for HIPAA compliance for the same. Definitely Native is a good option but I am looking for cost-effective option from development as well as…
Iducool
  • 3,015
  • 2
  • 20
  • 40
4
votes
1 answer

How do you sign a HIPAA BAA for Google Cloud platform?

Not sure if this question is appropriate for this topic. There is a lot of documentation stating that Google will sign a BAA for their services but it is very difficult to find the place to actually sign it. After a few searches I was able to find…
vicg
  • 1,037
  • 11
  • 30
4
votes
0 answers

HIPAA-compliant MySQL database - user search

I am writing a PHP application this has sensitive date protected by HIPAA. For the patients I want to be able to do a search for patients. IE the clinician can type part of a last name and it will bring up all users that match ie: SELECT * FROM…
4
votes
4 answers

Amazon SQS multi tenancy and HIPAA compliance

I'm going to implement client/server application - 1 server - [0-N] clients. In order to organize communication between clients and server I plan to use Amazon SQS or something like that. Right now I have a two questions: Is Amazon SQS HIPAA…
alexanoid
  • 19,599
  • 35
  • 160
  • 321
4
votes
1 answer

Security HIPAA ePHI Encryption

I have some down time and I am think of picking a new project for fun. I am a college student and every year we have a online pitch competition. I want to create a project for this pitch competition that is approx 9 months from now. The problem is…
John
  • 191
  • 10
1
2 3 4 5 6 7