Q. A long-term care facility has deployed laptops that connect to a file server and are password protected. The laptops are not used to store PHI or other confidential data and are not removed from the facility. Do the laptop hard drives need to be encrypted?
The HIPAA Privacy Rule de-identification standard-Section 164.514(a)-includes two methods by which health information can be designated as de-identified: expert determination and safe harbor.
HIM directors must revisit and potentially refine processes for patient record restriction requests and requests for electronic copies of medical records because of the HHS HIPAA omnibus final rule.
