By Randy Hersom, VP of Software Development, Habilitation Software Inc. Congress didn't, so HCFA is doing so. This isn't a checklist that's supposed to cover all the bases, just some important things to start doing now . The regulations will go into effect sometime in 2002, but anyone who delays finding out about it until then will almost certainly have insurmountable problems in meeting the regulations.
Successful compliance involves changes to daily routines.
The time to start building good habits is now. The first thing to consider is how you will limit access to your data. The draft regulation says you must implement either access controls or encryption . If you're considering the physical route, you may want to start to consider moving computers and purchasing locks. You should set a date when all computer room door locks and passwords are changed.