Learn more about encrypting patient’s personal health information (PHI) with this FAQ from the American Medical Association.
The FAQ explains the importance of encrypting personal health information, discusses what information practices should encrypt, and provides points to consider when selecting an encryption method.
Changes to the HIPAA Security Rule under the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 require practices to notify patients when unencrypted PHI is breached. The extensive notification requirements do not apply to breaches of encrypted PHI.