product icon

HIPAA Section B – HIPAA Technical Safeguards § 164.312

These safeguards apply directly to remote access products.

Note: Some items are marked as addressable. Under the terms of HIPAA, the term addressable is somewhat ambiguous, but it essentially means that the covered entity is allowed some flexibility in taking “reasonable” steps to comply with the standard or specification referred to.
Access Control 164.312(a)(1) Unique User Identification (Required)

Emergency Access Procedure (Required)

Automatic Logoff (Addressable)

Encryption and Decryption (Addressable)

Audit Controls 164.312(b) (Required)
Integrity 164.312(c)(1) Mechanism to Authenticate Electronic Protected Health Information (Addressable)
Person or Entity Authentication 164.312(d) (Required)
Transmission Security 164.312(e)(1) Integrity Controls (Addressable)

Encryption (Addressable)