{"id":1628,"date":"2011-10-19T00:00:00","date_gmt":"2011-10-19T00:00:00","guid":{"rendered":"http:\/\/otava.test\/hipaa-compliant-it-security-and-best-practices\/"},"modified":"2011-10-19T00:00:00","modified_gmt":"2011-10-19T00:00:00","slug":"hipaa-compliant-it-security-and-best-practices","status":"publish","type":"post","link":"https:\/\/www.otava.com\/blog\/hipaa-compliant-it-security-and-best-practices\/","title":{"rendered":"HIPAA Compliant IT Security and Best Practices"},"content":{"rendered":"

If you collect, process, store or transmit protected health information (PHI), including medical records, you will need to be able to pass a HIPAA audit to meet HIPAA compliance. To meet security safeguards, certain technologies and procedures are recommended in the industry, even if not specifically outlined by HIPAA standards.<\/p>\n

The rules and regulations in the Code of Federal Regulations (CFR) that pertain to HIPAA dictate that Online Tech, as a business that deals with clients\u2019 PHI, must:<\/p>\n

    \n
  1. Protect the availability, integrity and confidentiality of PHI<\/li>\n
  2. Have Business Associate Agreements (BAAs) with clients who have PHI<\/li>\n
  3. Report any violations of PHI misuse to the OCR (the Office of Civil Rights that audits, fines and charges companies and individuals for HIPAA violations<\/a>).<\/li>\n<\/ol>\n

    We deploy all of the following technology<\/strong> internally that helped us pass our own HIPAA audit, and allows us to offer HIPAA compliant hosting<\/a> solutions in our HIPAA compliant data centers<\/a> (we also happen to offer and recommend these services to our clients that need to be HIPAA compliant):<\/p>\n