Health assurance
The obligations depend on the organisation's role, the data and the service relationship. A useful delivery review therefore covers the data path, access model, safeguards, incident handling and any required Business Associate Agreement.
The framework
HIPAA is a US framework that includes privacy, security and breach-notification requirements for covered entities and business associates handling protected health information. The Security Rule focuses on appropriate administrative, physical and technical safeguards for electronic protected health information.
How we work with it
What we can leave behind
Concrete delivery evidence
HIPAA requirements formed part of the delivery context for the regulated health platform. The work combined the patient and clinician service with security, privacy, clinical-safety evidence, a DPIA and client questionnaires. The public material does not turn that engagement into a universal HIPAA certification claim.
Relevant delivery work
HIPAA requirements were considered alongside the health platform's security and safety evidence.
Read the work →Relevant delivery work
The delivery connected technical controls, review evidence and the live workflow.
Read the work →Keep the map connected
Need this mapped to your system?
Kuulo