Questions tagged [hipaa]

Health Insurance Portability and Accountability Act, subset of the ASC X12 EDI standard for to transfer of healthcare-related information.

HIPAA in this context refers to the data transmission standards mandated by the U.S. healthcare privacy act. It is based on the 004010 and 005010 versions of the X12 EDI standard, maintained by DISA.

The specific messages involve transferring inquiries, notifications, billing information and procedures between both healthcare providers (such as doctors, hospitals and other services) and billing agencies.

The Washington Publishing Company has the responsibility of publishing the actual standards documents.

105 questions
2
votes
2 answers

Are any Health Information Exchanges' APIs documented?

I was uncertain of the correct site in StackExchange to ask this but since it's about APIs I just went with Stack Overflow. In the US currently more and more States and companies are setting up Health Information Exchanges to electronically exchange…
simontemplar
  • 885
  • 1
  • 10
  • 17
2
votes
3 answers

Standards for Encrypting data in SOX/HIPAA in SQL Server 200x

I was wondering if there are any standards for encrypting sensitive data in Database which are compliant w/ SOX or HIPAA. Or does the Encrypt Function in SQLServer necessary?. or handle in Business logic. Any ideas or links we have.
Greens
  • 3,061
  • 11
  • 43
  • 61
1
vote
1 answer

Google Cloud SQL Postgres Vs Self Hosted Postgres using GCP Compute instances: HIPAA Compliance

This question is about infosec, data privacy, specifically HIPAA compliance on GCP. Is there any advantages for self managing Postgres server (built on GCP Compute instances using lets say Terraform) my own Vs using the managed offering, i,e. Cloud…
1
vote
2 answers

Does Autonomous Database meet HIPAA requirements?

Can I use Autonomous Data Warehouse and/or Autonomous Transaction Processing if my customer has data that is covered by HIPAA requirements?
Nilay Panchal
  • 541
  • 6
  • 17
1
vote
2 answers

use GCP database or Firestore with HIPAA compliance

I am building a project that needs to store some patient data, and it should work with HIPAA compliance since it this is medical information. is it possible to do this using firebase databases like cloud firestore or realtime database in 2021? If…
1
vote
1 answer

Identify Platform + Firestore REST client is that fits HIPAA requirements?

I'm designing a mobile application that uses Identity Platform and Firestore to store customer's PHI records. Both Identity Platform and Firestore are mentioned as products covered by Google Cloud BAA. Will that architecture solution also fit HIPAA?…
user1827334
  • 43
  • 1
  • 5
1
vote
0 answers

Is Google ReCaptcha v2 HIPAA compliant?

All is in the title. I have been looking for a while and couldn't get a clear answer: Something like Google itself stating in its documentation that it's HIPAA compliant. If not. Why? What is exactly not compliant and is there a way to resolve it?…
Ghazi
  • 126
  • 6
1
vote
1 answer

Are AWS SSH keys HIPAA or Sox compliant?

AWS typically uses SSH keys that get assigned on instance creation to facilitate access to EC2 instances through ssh. Those keys then typically get shared amongst the admin team to maintain the instances. Managing those keys for thousands of EC2…
Bernie Lenz
  • 1,967
  • 23
  • 45
1
vote
1 answer

Is App Maker hipaa compliant when is used with cloud sql

App Maker is hosted on app engine which is hipaa compliant. So when i use Cloud SQL which is hipaa compliant as well, can i use app maker for hipaa compliant applications in our company?
Aron
  • 1,179
  • 15
  • 29
1
vote
1 answer

BizTalk 2009 EDI HIPAA 5010A Hotfix/Update

I was wondering if anyone could offer any insight as to when an update is going to be released for BizTalk to comply with the 5010A standard, all addendums and errata included. I've just about exhausted myself with Google and Bing searches and the…
dramatix01
  • 65
  • 7
1
vote
1 answer

How can I detect a user is using speech-to-text?

Is there any way I can detect when a user is using their phone's Speech-To-Text feature with Xamarin? The application I'm working on needs to be HIPAA compliant and the Speech-To-Text APIs are not HIPAA compliant. I would like to find a way to…
1
vote
0 answers

Chatbot, when is HIPAA required

We will build a chat bot for a medical device in combination with an App. Chatbot job is to help for question about the device, app and general questions about the siknes where the device is build for. Needs the Chatbot to be a hipaa compliance…
Aron
  • 1,179
  • 15
  • 29
1
vote
2 answers

WCF netTCPBinding Built-in Transport Security Strength and HIPAA Compliance

What is the strength of the default TCP transport security using WCF netTCPBinding? Is it HIPAA compliant and where is documentation stating this?
it.periop
  • 11
  • 3
1
vote
1 answer

Where to start with a HIPAA-compliant iOS app on AWS?

I'm researching pathways to developing a HIPAA-compliant iOS app in the healthcare space on AWS; I've found scattered information so am seeking additional guidance here on how to best prepare and where to start?
codr
  • 889
  • 3
  • 13
  • 22
1
vote
0 answers

MySQL Hipaa Logging

I'm having a difficult time making my MySQL instance on GCP adhere to the logging qualifications for Hipaa. My main concern is that the general_log would provide so much unnecessary logging, and also doesn't necessarily provide information regarding…