{"id":3051,"date":"2016-02-04T00:00:00","date_gmt":"2016-02-04T00:00:00","guid":{"rendered":"http:\/\/otava.test\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/"},"modified":"2016-02-04T00:00:00","modified_gmt":"2016-02-04T00:00:00","slug":"four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required","status":"publish","type":"post","link":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/","title":{"rendered":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it’s not required"},"content":{"rendered":"

\"Healthcare<\/em>Encryption has been widely talked about as one of the best tools to protect you against potential attacks on your data. For many companies processing credit card payments, encrypting data is required for compliance with standards such as PCI DSS and individual state laws. But if you\u2019re in the healthcare industry, it\u2019s even more important because it\u2019s not<\/strong> required for hipaa compliance<\/a>.<\/em><\/p>\n

What is encryption? It takes your data and codes it using a series of mathematical formulas to render it unreadable without a special key to unlock it. There are many different levels of encryption, but the one recommended by the National Institute of Standards and Technology is AES-256 bit, the same standard used by the federal government to encrypt classified documents.<\/p>\n

While other industries might have been quick to catch on to encryption, healthcare has not. There have been several reports<\/a>\u00a0of various hospitals<\/a>\u00a0reporting breaches of sensitive data due to unencrypted files\u00a0being stolen<\/a>.<\/p>\n

What happens if you decide not to encrypt your data? You\u2019re leaving your business open to an enormous amount of risk. When you don\u2019t have<\/strong> to use something, chances are you probably won\u2019t. But when it comes to sensitive information, not using all the tools possible to protect it can allow people to take advantage of you. Of course, not everything has to be encrypted. But it\u2019s a great idea to decide which specific records or programs need to be encrypted, and plan accordingly.<\/p>\n

To get you started, here are four benefits of encrypting your data:<\/strong><\/p>\n

    \n
  1. If your hardware is stolen, encrypted data is not necessarily breached if the encryption keys aren\u2019t compromised as well. This can save you thousands or even millions in fines and fees from credit card companies and\/or the government if you have to be compliant with HIPAA<\/a> or PCI<\/a>.<\/li>\n<\/ol>\n
      \n
    1. If you\u2019re in the healthcare industry, you can also save money if your encrypted data ends up stolen but not compromised because HHS does not require notification in that case. In fact, if fewer than 500 individuals are affected, the covered entity (such as a hospital or physician\u2019s office) may inform the Secretary of HHS on an annual basis, as long as it is within 60 days after the end of the calendar year in which the breach took place.<\/li>\n<\/ol>\n
        \n
      1. Medical identity theft is harder to detect than credit card theft and is more profitable. Thieves can use sensitive information to fraudulently buy prescription drugs or bill insurances (especially Medicare) for services never received, often leading to millions of dollars in losses and all around headaches. Encrypting your protected health information (PHI) can help prevent would-be thieves from accessing your data and using it for malicious intent.<\/li>\n<\/ol>\n
          \n
        1. The HITECH Act requires everyone to have an Electronic Health Record by 2014, meaning there is a greater reason than ever to keep medical information as protected as possible. The law practically begs for encryption, stating covered entities must have \u201csecurity methods to ensure appropriate authorization and electronic authentication of health information and specifying technologies or methodologies for rendering health information unusual, unreadable or indecipherable.\u201d It also recommends implementing technologies that \u201callow individually identifiable health information to be rendered unusable, unreadable or indecipherable to unauthorized individuals when such information is transmitted in the nationwide health information network or physically transported outside of the secured, physical perimeter of a health care provider, health plan, or health care clearinghouse.\u201d While the law doesn\u2019t explicitly say so, encryption is one of the best ways to comply with this requirement.<\/li>\n<\/ol>\n

          An important caveat: It\u2019s not just encryption you should invest in, but strong<\/em> encryption. When encrypted data is breached, part of the reason attackers gain access to sensitive information, like they did with Ashley Madison<\/a>\u00a0and VTech<\/a>\u00a0is because of weak encryption technologies. When you decide what data is worth protecting, make sure it\u2019s protected well.<\/p>\n

          While encryption is one tool of many to provide a layered approach to security that is practically required to mitigate risk of unauthorized access, it is not a catch-all. Take a proactive stance against potential incidents by using other measures such as web application firewalls<\/a> and two-factor authentication<\/a> along with encrypting your sensitive data so that you are protected if it should fall into the wrong hands.<\/p>\n","protected":false},"excerpt":{"rendered":"

          Encryption has been widely talked about as one of the best tools to protect you against potential attacks on your data. For many companies processing credit card payments, encrypting data is required for compliance with standards such as PCI DSS and individual state laws. But if you\u2019re in the healthcare industry, it\u2019s even more important because it\u2019s not required for hipaa compliance. What is encryption? It takes your data and codes it using a series of mathematical formulas to render it unreadable without a special key to unlock it. There are many different levels of encryption, but the one recommended by the National Institute of Standards and Technology is AES-256 bit, the same standard used by the federal government to encrypt classified documents. While other industries might have been quick to catch on to encryption, healthcare has not. There have been several reports\u00a0of various hospitals\u00a0reporting breaches of sensitive data due to unencrypted files\u00a0being stolen. What happens if you decide not to encrypt your data? You\u2019re leaving your business open to an enormous amount of risk. When you don\u2019t have to use something, chances are you probably won\u2019t. But when it comes to sensitive information, not using all the tools possible…<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"other_category":[],"class_list":["post-3051","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"yoast_head":"\nFour reasons why if you\u2019re in healthcare, you need encryption, even if it's not required | OTAVA<\/title>\n<meta name=\"description\" content=\"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Four reasons why if you\u2019re in healthcare, you need encryption, even if it's not required\" \/>\n<meta property=\"og:description\" content=\"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\" \/>\n<meta property=\"og:site_name\" content=\"OTAVA\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-04T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg\" \/>\n<meta name=\"author\" content=\"Irma Brillantes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Irma Brillantes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\"},\"author\":{\"name\":\"Irma Brillantes\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\"},\"headline\":\"Four reasons why if you\u2019re in healthcare, you need encryption, even if it’s not required\",\"datePublished\":\"2016-02-04T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\"},\"wordCount\":735,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\",\"url\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\",\"name\":\"Four reasons why if you\u2019re in healthcare, you need encryption, even if it's not required | OTAVA\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg\",\"datePublished\":\"2016-02-04T00:00:00+00:00\",\"description\":\"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage\",\"url\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg\",\"contentUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.otava.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Four reasons why if you\u2019re in healthcare, you need encryption, even if it’s not required\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.otava.com\/#website\",\"url\":\"https:\/\/www.otava.com\/\",\"name\":\"OTAVA\u00ae\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.otava.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.otava.com\/#organization\",\"name\":\"OTAVA\u00ae\",\"url\":\"https:\/\/www.otava.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"contentUrl\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"caption\":\"OTAVA\u00ae\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\",\"name\":\"Irma Brillantes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"caption\":\"Irma Brillantes\"},\"url\":\"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it's not required | OTAVA","description":"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/","og_locale":"en_US","og_type":"article","og_title":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it's not required","og_description":"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.","og_url":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/","og_site_name":"OTAVA","article_published_time":"2016-02-04T00:00:00+00:00","og_image":[{"url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg","type":"","width":"","height":""}],"author":"Irma Brillantes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Irma Brillantes","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#article","isPartOf":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/"},"author":{"name":"Irma Brillantes","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263"},"headline":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it’s not required","datePublished":"2016-02-04T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/"},"wordCount":735,"commentCount":0,"publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"image":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/","url":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/","name":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it's not required | OTAVA","isPartOf":{"@id":"https:\/\/www.otava.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage"},"image":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg","datePublished":"2016-02-04T00:00:00+00:00","description":"Encryption is one of the best tools to protect data. Here are four reasons why healthcare providers need encryption, even if it is not required by HIPAA.","breadcrumb":{"@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#primaryimage","url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg","contentUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/confidential-folder_84204851.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.otava.com\/blog\/four-reasons-why-if-youre-in-healthcare-you-need-encryption-even-if-its-not-required\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.otava.com\/"},{"@type":"ListItem","position":2,"name":"Four reasons why if you\u2019re in healthcare, you need encryption, even if it’s not required"}]},{"@type":"WebSite","@id":"https:\/\/www.otava.com\/#website","url":"https:\/\/www.otava.com\/","name":"OTAVA\u00ae","description":"","publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.otava.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.otava.com\/#organization","name":"OTAVA\u00ae","url":"https:\/\/www.otava.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","contentUrl":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","caption":"OTAVA\u00ae"},"image":{"@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263","name":"Irma Brillantes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","caption":"Irma Brillantes"},"url":"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/3051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/comments?post=3051"}],"version-history":[{"count":0,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/3051\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/media?parent=3051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/categories?post=3051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/tags?post=3051"},{"taxonomy":"other_category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/other_category?post=3051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}