By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
Health Works CollectiveHealth Works CollectiveHealth Works Collective
  • Health
    • Mental Health
  • Policy and Law
    • Global Healthcare
    • Medical Ethics
  • Medical Innovations
  • News
  • Wellness
  • Tech
Search
© 2023 HealthWorks Collective. All Rights Reserved.
Reading: Get Compliant or Get Out of the Game: HIPAA’s No Joke
Share
Notification Show More
Font ResizerAa
Health Works CollectiveHealth Works Collective
Font ResizerAa
Search
Follow US
  • About
  • Contact
  • Privacy
© 2023 HealthWorks Collective. All Rights Reserved.
Health Works Collective > eHealth > Medical Records > Get Compliant or Get Out of the Game: HIPAA’s No Joke
eHealthMedical RecordsPolicy & LawTechnology

Get Compliant or Get Out of the Game: HIPAA’s No Joke

onlinetech
onlinetech
Share
4 Min Read
HIPAA Cloud Hosting
SHARE

HIPAA Cloud HostingAttention hosting companies currently supporting healthcare clients: get compliant or get out of the game.

HIPAA Cloud HostingAttention hosting companies currently supporting healthcare clients: get compliant or get out of the game. For those still unaware, cloud hosting and other IT vendors involved with the storage or transmission of healthcare data must meet HIPAA compliance by…two days ago (September 23). So, by the end of the year, at least, for all you laggers. Here’s what happens if you are not compliant, and still continue to serve healthcare clients:

  • You may be subject to an audit conducted by the federal government;
  • You could pay some major fines;
  • You could lose a lot of business;
  • And if you suffer a data breach (of unencrypted data affecting 500 people or more), you will definitely be subject to all of the above.

And for covered entities (healthcare organizations that deal with protected health information (PHI)), if you’re hosting your data and/or applications with a non-compliant business associate (hosting provider), then you can also be held liable in the event of a data breach. Switch to an audited and compliant HIPAA hosting provider, and you’ll be in the safe zone (note: your organization also needs to maintain compliance; your IT vendor does not make you compliant by proxy).

Cloud vendors can’t really afford to take the risk of supporting healthcare clients without first ensuring they’re operating fully in compliance with HIPAA. And HIPAA is a lot more than just technical security – the standards also require administrative and physical security safeguards. A few examples include:

More Read

online nursing resources
Nurse Educator Resources for Online Clinical Education
Guarding Your Health – 6 Essential PPE Investments for the New Home Health Worker
Career Searching? Don’t Forget Nursing!
Is Medicaid Real Insurance?
What You Need to Know About Mobile Health Apps in 2018

Administrative Security

  • Annual audits and reports indicate that business associates are maintaining ongoing compliance, not just a point-in-time
  • Documented policies and procedures should reflect protocol in the event of a data breach, including notification time
  • Staff training is specific to business associates and hosting providers on how to handle ePHI (electronic protected health information)

Physical Security

  • Limited and authorized personnel access to locked servers
  • Dual factor authentication for building access (we use biometrics; fingerprint ID + badges)
  • Environmental controls include logged surveillance cameras, 24×7 monitoring and multiple alarm systems

Technical Security

  • Encryption of data in transit and at rest requires VPNs, SSL, two-factor authentication and hardware-based storage encryption
  • Daily log review tracks user activity and analyses them to identify any potential issues and patterns
  • Vulnerability scanning checks for outdated versions of software, web apps that aren’t securely coded, and misconfigured networks

And so much more! The point is, HIPAA compliance is a little more complex as it involves assessing unique organizational structures to ensure there are no security gaps, as well as ongoing maintenance for complete data protection. And if you’re currently using a non-compliant hosting provider to host patient data, you’d better find a new one that is compliant…like yesterday.

TAGGED:dataHIPAAPrivacy
Share This Article
Facebook Copy Link Print
Share

Stay Connected

1.5kFollowersLike
4.5kFollowersFollow
2.8kFollowersPin
136kSubscribersSubscribe

Latest News

a woman walking on the hallway
6 Easy Healthcare Ways to Sit Less and Move More Every Day
Health
September 9, 2025
Clinical Expertise
Healthcare at a Crossroads: Why Leadership Matters More Than Ever
Global Healthcare
September 9, 2025
travel nurse in north carolina
Balancing Speed and Scope: Choosing the Nursing Degree That Fits Your Goals
Nursing
September 1, 2025
intimacy
How to Keep Intimacy Comfortable as You Age
Relationship and Lifestyle Senior Care
September 1, 2025

You Might also Like

Social Media

Physician Rating Sites: Threat or Opportunity?

May 13, 2013
machine learning in healthcare
Artificial IntelligenceeHealth

The Most Significant Applications of Machine Learning in Healthcare

March 10, 2021

The Medical Marijuana Mess

August 30, 2014
Men vs. Women
Hospital AdministrationPolicy & Law

Does Decreased Length of Hospital Stay Equal Lower Cost?

April 10, 2013
Subscribe
Subscribe to our newsletter to get our newest articles instantly!
Follow US
© 2008-2025 HealthWorks Collective. All Rights Reserved.
  • About
  • Contact
  • Privacy
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?