Questions tagged [hipaa]

Health Insurance Portability and Accountability Act, subset of the ASC X12 EDI standard for to transfer of healthcare-related information.

HIPAA in this context refers to the data transmission standards mandated by the U.S. healthcare privacy act. It is based on the 004010 and 005010 versions of the X12 EDI standard, maintained by DISA.

The specific messages involve transferring inquiries, notifications, billing information and procedures between both healthcare providers (such as doctors, hospitals and other services) and billing agencies.

The Washington Publishing Company has the responsibility of publishing the actual standards documents.

97 questions
4
votes
1 answer

Audit trails and implementing HIPAA best practices

Are there any best practices for audit trail implementation for HIPPA starting with database design.
Greens
  • 2,921
  • 11
  • 41
  • 57
3
votes
0 answers

How can we make our iPhone App HIPAA compliant?

I wanted to develop an iOS App for managing medical records.How can we make our iPhone App HIPAA compliant? UPDATE: Is there any specific Encryption Algorithm you would suggest to safeguard EMR ?
Krishnan
  • 11,487
  • 22
  • 87
  • 152
3
votes
1 answer

DynamoDB encryption for hipaa compliance

We develop a PWA that needs hipaa compliance based on AWS. In this paper writes AWS AWS Architecture Whitepaper when PHI is stored in DynamoDB needs to encrypt before is stored in DynamoDB. Now has AWS relased Enryiption at Rest at some DynamoDB…
Aron
  • 1,079
  • 10
  • 27
3
votes
0 answers

Firebase HIPAA compliance database setup

I am working on a medical related web solution where the application keeps patient's data (name, diagnoses, etc...), and we are using firebase's real time database for this. We have tried to formulate some solutions to comply to HIPAA standards.…
CENT1PEDE
  • 6,762
  • 8
  • 60
  • 110
3
votes
1 answer

Maintaining HIPAA Compliance Using Views in MySQL

The Problem We have a large web application that stores and displays sensitive HIPAA-related data. We're currently researching ways to improve HIPAA compliance and reduce the risk of having a violation. Currently, there are several features and…
Levi Hackwith
  • 9,002
  • 15
  • 60
  • 111
3
votes
1 answer

FHIR: Spark.Net: Making MongoDB storage HIPAA compliant

I'm looking for ways to make the Mongo storage used by Spark.Net HIPAA compliant. Does using MongoDB SSL Transport to encrypt data on wire and using Gazzang for data at rest good enough? Are there other options for data at rest while still allowing…
frosty
  • 1,341
  • 4
  • 16
  • 36
3
votes
1 answer

PhoneGap Cordova HIPAA compliance

Given that a Cordova app can be plugged in and inspected, are apps inherently less secure that native compiled code? Or do just the same rules apply regarding what's kept in and a normal UIWebView?
Perry
  • 814
  • 7
  • 13
2
votes
0 answers

storing HIPAA data directly from ionic/angular mobile application front end

I have an Ionic app that gathers data from users in the form of a survey. The survey data needs to be stored in a HIPAA compliant manner. I have discovered that box.com, google drive, AWS, and others are all decent options for HIPAA data. MY…
user1990406
  • 469
  • 3
  • 13
2
votes
0 answers

Privacy and Security of Google Cloud Print

Our Physician and Nurses end-users need to print sensitive PHI (Patient Health Information) from their mobile devices (both iOS and Android) to local-network printers. We are considering Google Cloud Print as a cross-platform solution for this,…
Matt
  • 51
  • 6
2
votes
1 answer

Is google cloud load balancer hipaa compliance

I read the hipaa doc from google, i'm no sure is the google cloud load balancer hipaa complince. google cloud hipaa google says all the networks and regions are hipaa complince, i think this includes this products: VPC cloud DNS cloud…
Aron
  • 1,079
  • 10
  • 27
2
votes
2 answers

Is Azure Functions covered under the HIPAA BAA?

I'm looking at the list of covered services on https://www.microsoft.com/en-us/TrustCenter/Compliance/HIPAA and I don't see Azure Functions explicitly listed. Does Azure Functions fall under the umbrella of "App Service" and therefore covered?
Douglas Ludlow
  • 9,865
  • 5
  • 27
  • 52
2
votes
1 answer

HIPAA compliance Encryption/Decryption for data in motion and at rest

If one is hosting an healthcare application(For me its ASP.NET MVC and going to host it in Azure cloud service) which needs to be HIPAA compliance, then encryption is required in 2 aspects: data in motion; and data at rest. Upon searching various…
2
votes
1 answer

HIPAA Compliant App, using Encrypted Core Data vs Core Data Attribute Encryption

I am writing an iOS app which needs to be HIPAA compliant. The app should preferably function offline, so data needs to be stored on the phone. So here is what I was thinking of doing: On First Launch user enters username, password and a…
Taha Samad
  • 1,105
  • 1
  • 9
  • 21
2
votes
2 answers

Are any Health Information Exchanges' APIs documented?

I was uncertain of the correct site in StackExchange to ask this but since it's about APIs I just went with Stack Overflow. In the US currently more and more States and companies are setting up Health Information Exchanges to electronically exchange…
simontemplar
  • 856
  • 9
  • 16
2
votes
3 answers

Standards for Encrypting data in SOX/HIPAA in SQL Server 200x

I was wondering if there are any standards for encrypting sensitive data in Database which are compliant w/ SOX or HIPAA. Or does the Encrypt Function in SQLServer necessary?. or handle in Business logic. Any ideas or links we have.
Greens
  • 2,921
  • 11
  • 41
  • 57