Transcend for HIPAA compliance.
With Transcend’s HIPAA compliant privacy platform, get industry-leading protections for simplified compliance with the Health Insurance Portability & Accountability Act and your most sensitive patient data.
Understanding HIPAA
What businesses need to know
The U.S. Health Insurance Portability and Accountability Act of (HIPAA) was introduced in 1996 and established a set of standards to ensure the protection of sensitive patient health information (PHI). A key part of HIPAA is the Privacy Rule, and the Security Rule protecting a subset of electronic PHI (ePHI).
What information is covered?
“Individually identifiable health information” including information related to a patient’s medical conditions, health care provided, healthcare payment information, or other data of which could be reasonably be used to identify the patient or individual.
Who does HIPAA apply to?
“Covered entities” according to HIPAA are healthcare providers, health plans above a certain size, clearinghouses and businesses who do business with the covered entity that HIPAA applies to (put another way, software that a covered entity uses would be one example of this).
What does HIPAA specify?
The HHS website contains a number of useful summaries, but in a nutshell, HIPAA and its Privacy and Security rules set standards around data subject access and amendment, provide clarity around privacy practices, and require the implementation of administrative, technical, and physical safeguards to protect PHI and ePHI.