HIPAA obligates people in possession of patient health information to a few dozen technical requirements, described in the Security rule, Privacy rule, and related rulemaking. A sampling of these requirements include requiring per-user accounts, complex passwords, encryption of data in transit and at rest, formal risk assessments of computer systems, and the like.
Appointment Reminder has complied with all requirements of the HIPAA Privacy and Security rules. We’re happy to discuss them with you. Certain details of our compliance strategy may require a NDA to disclose to you — for example, detailed information about our technical infrastructure.