LogMeIn Central HIPAA considerations
The Health Insurance Portability and Accountability Act (HIPAA), passed by Congress in 1996, requires all organizations that keep or send electronic healthcare information to establish and implement certain administrative, physical, and technical safeguards to keep that information safe from unauthorized access.
The Department of Health & Human Services has issued specific rules to enforce the act, namely the HIPAA Security Standards published in the Federal Register on February 20, 2003 (45 CFR Parts 160, 162 and 164 Health Insurance Reform: Security Standards, Final Rule).
These rules include Technical Safeguards that apply to covered entities that use remote access products to keep or send electronic healthcare information. To view the HIPAA rules in their entirety, visit the Health Information Privacy page of the U.S. Department of Health and Human Services website at www.hhs.gov/ocr/privacy/, or go directly to the Security Standards: Technical Safeguards document.
About this Document
This publication provides a brief introduction to the scope of HIPAA compliance with regard to remote access products (including LogMeIn Pro and LogMeIn Central) and support and collaboration products (including Rescue).
Section A outlines key background information needed to understand the scope of HIPAA compliance with regard to remote access products.
Section B outlines the HIPAA rules’ Technical Safeguards (see § 164.312), which apply to remote access products used by entities subject to HIPAA compliance.
Sections C through H show how GoTo helps organizations adhere to, meet, or exceed these safeguards.
- HIPAA Section A – Background information on HIPAA rules
- HIPAA Section B – HIPAA technical safeguards § 164.312
- HIPAA Section C – Access control § 164.312(a)(1)
- HIPAA Section D – Audit controls § 164.312(b)
- HIPAA Section E – Integrity policies and procedures, § 164.312(c)(1)
- HIPAA Section F – Integrity mechanism, § 164.312(c)(2)
- HIPAA Section G – Person or entity authentication§ 164.312(d)
- HIPAA Section H.1 – Transmission security § 164.312(e)(1)
- HIPAA Section H.2 – Transmission security § 164.312(e)(1) integrity controls
- HIPAA Section H.3 – Transmission security, encryption § 164.312(e)(1)
In this section: