What is ePHI?
Electronic Protected Health Information (ePHI) includes any individually identifiable health data transmitted or stored electronically. HIPAA mandates specific technical safeguards to prevent unauthorized access.
Required Technical Safeguards
- Access Controls: Unique user identification, emergency access procedures, and automatic logoff.
- Audit Controls: Hardware, software, and procedural mechanisms that record and examine ePHI activity.
- Integrity Controls: Ensure ePHI is not altered or destroyed improperly (checksums, digital signatures).
- Transmission Security: Encrypt ePHI during transmission using TLS 1.2 or higher.