2) Security Rule

The HIPAA Security Rule requires that reasonable and appropriate technical, physical, and administrative safeguards be taken with electronic individually identifiable health information. Specifically, we must ensure the confidentiality, integrity, and availability of all electronic protected health information (ePHI) we create, receive, maintain or transmit. Compliance with the Security Rule became required on April 21, 2005, and is managed by the Office of Information Technology’s IT Security and Compliance Team.