HIPAA Requirement Security
The Health Insurance Portability and Accountability Act (HIPAA) was first conceived in 1996. Its purpose was to regulate the privacy and security of personal health information (PHI). Since its official acceptance in August 2003, medical practices across the nation have been working to make sure that the systems they use for medical record storage and billing are compliant to HIPAA.
In April 2005, a modification was made to HIPAA: the HIPAA Security Requirement. The HIPAA Security Requirement mandates that all systems have specific security measures in place. These security measures must (1) physically AND electronically secure electronic protected health information (PHI) against unauthorized retrieval, (2) reliably store the electronic data, and (3) provide for emergency access to the data.
AdvancedMD's® systems comply to the HIPAA Security Requirement
AdvancedMD® stores all of your electronic data in a datacenter facility that features eight levels of security measures. A three-level backup system provides added protection against the loss of your information, giving you peace of mind about your backup and disaster-recovery planning. All data is backed up approximately every hour, secure copies are stored every night, and every backup is verified to restore correctly.
Because AdvancedMD's® systems are entirely Web-based you don't have the same in-house security issues that companies with a traditional software system face. You don't have to worry about protecting your patient data from both physical access (like break-ins or disgruntled employees) and electronic access (like hackers) because the AdvancedMD datacenter takes care of all your security needs. Click here to read more about the advantages of Web-based software.
Other tools AdvancedMD® provides for HIPAA Security Requirement compliance
- Secure transfer: AdvancedMD® uses powerful SSL 128-bit encryption to safeguard the electronic transfer of all data - the same level of security as bank and Federal transactions.
- Automatic logout: The Security Rule includes requirements that users be automatically logged out after a period of time, to prevent unauthorized access of patient records. This feature comes standard with AdvancedMD®.
- User logging: AdvancedMD® automatically tracks all users logging into and out of the system for reference by a system administrator.
- Audit trial: The system permanently tracks any changes made to PHI, so those changes can be reviewed at any time by a system administrator.
Click here for more information on AdvancedMD's compliance with HIPAA and the HIPAA Security Requirement.
