HIPAA

The Health Insurance Portability and Accountability Act (HIPAA) is a U.S. healthcare law that sets strict standards for protecting patient health information, especially when employees come and go in healthcare organizations.

Standards include:

• Limit and document who has possession of each asset to avoid unauthorized use or disclosure

• Tag and track all devices that may store patient data (like smartphones, tablets, and laptops)

• Encrypt and wipe drives during disposal or reassignment to protect health information