HIPAA

[Iakov_Qvaz]

From my readings,  it appears the crux of HIPAA's security rules is data security against unauthorized access.

BUT

This is nothing new.  Security-conscious organizations already secure their data against unauthorized access.  So is there any difference between HIPAA's security requirements and the security that say, HR and Accounting departments already enjoy?  I want to make sure I am not misunderstanding HIPAA.

[Former Community Member]

That's a good question.

There is certainly a great deal of HIPAA security material available at

http://www.cms.hhs.gov/EducationMaterials/04_SecurityMaterials.asp

In my opinion, the HIPAA security guidelines apply to the creation, exchange, and storage of electronic health data systemically and they do not prescribe specific technology. In fact, I think they are intended to be technology agnostic. As a result you cannot align the requirements with the application of a specific solution.

Having said that, I think LiveCycle ES and PDF are a good set of tools to address HIPAA security considering you can encrypt documents (through digital signatures and document certfication), apply rights to documents (permissions to open and print), and do document tracking and auditing (who opened a document, the IP the documet was opened on, who printed a document, etcetera).

Steve