Question

How doe the HIPAA security rule differ from the HIPAA privacy rule?

Answer 1

Ans) The Difference Between HIPAA Privacy and HIPAA Security:

- Both the HIPAA Privacy and Security rules work together to ensure the protection of sensitive patient data, yet they are separate and have distinctly unique purposes.

- The HIPAA Privacy Rule revolves around the individual and their rights to have control over the way their sensitive data is used. Essentially, medical organizations can use the sensitive data for necessary functions, such as operations, medication and payment. Aside from this, the data must remain confidential.

- The Privacy Rule ensures that all forms of Protected Health Information (PHI) are protected and remain private; including physical copies, electronic copies and any information transferred orally.

- The HIPAA Security Rule differs in that it only applies to Electronic Protected Health Information (ePHI). Any such information that an organization creates, receives uses or maintains is subject to this rule. Some of the specific elements of the Security Rule include the requirement of regular risk assessments and have policies in place to ensure the security of electronic data. These policies should be related to password management, change auditing, email handling and much more.