HHS publishes paper on HIPAA physical safeguards
The Department of Health and Human Services (HHS) has published the third in a series of seven papers designed to provide guidance on the HIPAA security standards. (Go to www.cms.hhs.gov/hipaa/hipaa2.) This paper deals with requirements for physical safeguards for information systems and related equipment and facilities.
The HIPAA Security Rule defines physical safeguards as "physical measures, policies, and procedures to protect a covered entity’s electronic information systems and related buildings and equipment from natural and environmental hazards and unauthorized intrusion."
The department says that when covered entities evaluate and implement the standards, they must consider all physical access to electronic protected health information (EPHI), noting this may extend outside of an actual office and could include work force members’ homes or other physical locations where they access EPHI.
Physical standards include facility access controls, workstation use, workstation security, and device and media controls. For each of the standards, the paper includes definitions, questions for covered entities to consider, and implementation specifications. Previous papers presented an overview of the rule and guidance on administrative safeguards. Upcoming papers will cover technical safeguards; policies, procedures, and documentation; risk analysis and risk management; and implementation for small providers.
The Department of Health and Human Services (HHS) has published the third in a series of seven papers designed to provide guidance on the HIPAA security standards.
You have reached your article limit for the month. Subscribe now to access this article plus other member-only content.
- Award-winning Medical Content
- Latest Advances & Development in Medicine
- Unbiased Content