Tag Archives: Auditing

Without giving you a full course on HIPAA and the HITECH Act, here are the most important talking points with regard to SharePoint and HIPAA. First, there are two parts to HIPAA: 1) security and 2) privacy. With regard to security, SP is more than robust enough to provide adequate security to satisfied HIPAA. The best recommendation is to use SSL and role based security.

With regard to privacy, the most important aspect is the question of “accounting”. In other words, can the covered entity provide adequate reporting for who looked at protected health information. First, there are some important caveats. Accounting must happen unless it is for the following exemptions: Read more: HIPAA Accounting and SharePoint 2010