Business Quote by Anonymous
““Finally, we close this section with the following from the January 25, 2013, final rule: Covered entities and business associates that implement the specified technologies and methodologies with respect to protected health information are not required to provide notifications in the event of a breach of such information—that is, the information is not considered “unsecured” in such cases.58 We encourage covered entities and business associates to take advantage of the safe harbor provision of the breach notification rule by encrypting limited data sets and other protected health information pursuant to the Guidance. … If protected health information is encrypted pursuant to this guidance, then no breach notification is required following an impermissible use or disclosure of the information.”59””
About This Quote
Source Regulation: HIPAA Breach Notification Rule Guidance, 2013
Encrypted protected health information is exempt from breach notification requirements, allowing entities to avoid costly alerts if data is properly secured.
In simple terms: Encryption can skip breach alerts.
Use encryption to protect health data.
Themes
Mood
Type
When to use this quote
- hospital IT
- healthcare providers
- insurance firms
- data management teams
Key Concepts
Questions to Reflect On
- Are your encryption practices up to date?
- What steps ensure data remains secure?
Encryption must be correctly implemented; otherwise breaches still occur.