HIPAA Compliance And Varonis

About HIPAA

Overview

This document provides an overview of the Health Insurance Portability and Accountability Act (HIPAA), its scope and purpose as well as a description of the way in which Varonis Systems enables entities to follow guidelines for regulation compliance. Varonis personnel and value added partners may distribute this document as an informational overview.

Background

The Health Insurance Portability and Accountability Act of 1996 (HIPAA), Public Law 104-191, the US Department of Health and Human Services (DHHS) published on November 3, 1999 proposes regulations establishing national standards for privacy of health information.

The Security Rule

The Final Rule on HIPAA Security Standards was issued on February 20, 2003. It took effect on April 21, 2003 with a compliance date of April 21, 2005 for most covered entities and April 21, 2006 for “small plans.” The Security Rule complements the Privacy Rule. While the Privacy Rule pertains to all Protected Health Information (PHI) including paper and electronic, the Security Rule deals specifically with Electronic Protected Health Information (EPHI). It lays out three types of security safeguards required for compliance: administrative, physical, and technical.

Download this full white paper from the link below.