HIPAA Compliant
Web Portals

HIPAA Compliant Web Portals

The Health Insurance Portability and Accountability Act was signed into law in 1996. It established regulatory standards related to patient privacy and data security. Enforcement of the HIPAA standards by the U.S. Department of Health and Human Services Office (HHS) of Civil Rights (OCR) has increased significantly in recent years.

If you’re transmitting or maintaining Electronic Protected Health Information (ePHI), you need to comply with HIPAA security regulations. There are 18 specific types of electronic protected health information, including patient names, addresses, Social Security numbers, fingerprints or photographic images, among others. In addition, any past medical records or payment information is subject to the same degree of privacy protection.

A core focus of SD3 relates to the HIPAA Security Rule. This rule establishes national standards to protect individuals’ electronic protected health information (e-PHI) that is created, received, used, or maintained by a HIPPA covered entity. The Security Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of ePHI.

These protections, when properly applied, can help you avoid some of the common security gaps that lead to cyber attack or accidental data loss. The concept is to protect the people, information, technology, and facilities.

The HIPAA Security Rule requires covered providers to implement security measures, which help protect patients’ privacy by creating the conditions for patient health information to be available but not be improperly used or disclosed.

In addition to the HIPAA Security Rule, there’s also the HIPAA Privacy Rule and Breach Notification Rule. Each of these three rules is encompassed by the overarching Omnibus Rule, which took effect in 2013 and ushers in enforcement of business associates for the first time. The requirements of the Omnibus Rule were mandated by the Health Information Technology for Economic and Clinical Health (HITECH) Act, passed in 2009 as part of the economic stimulus bill.

SD3 provides a comprehensive solution that can help companies large and small navigate through the issues whether it be a simple assessment of database security or a custom portal or application to properly allow users to access ePHI.