XQ helps simplify your HIPAA compliance burden by protecting electronic PHI with out-of-the-box functionality.
The U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) has reminded healthcare organizations and their business partners about their responsibilities under the Health Insurance Portability and Accountability Act (HIPAA) when using online tracking technologies.
- Defines online tracking technologies as those used to collect and analyze information about how users interact with healthcare websites and apps.
- Highlights the importance of protecting patients’ personal health information (PHI) and warns against unauthorized disclosures to tracking technology vendors.
- Emphasizes that healthcare organizations must comply with HIPAA rules and take appropriate measures to safeguard PHI.
- Provides an overview of tracking technologies, and explains how they are used on authenticated and unauthenticated webpages, and within mobile apps.
- Outlines the compliance obligations for healthcare organizations, including ensuring authorized disclosures of PHI, establishing agreements with tracking technology vendors, addressing tracking technologies in risk management processes, implementing safeguards for electronic PHI, and notifying individuals in case of unauthorized disclosures.
As opposed to the application or network, XQ protects the data itself with Zero Trust, ensuring your data is only accessed when, where, and by whom you choose. This allows you to:
- Retain jurisdictional data control.
- Maintain a global record of data access.
- Become and stay compliant with global data policies.
Please refer to the HIPAA Onboarding and Installation Guide for information on how to set up and deploy XQ in accordance with HIPAA regulations.