News for hackers. Stuff that matters.
Re:Why corporate IT should unchain our office computers by dkokelley on Thursday August 27, 2009 @01:48AM (#788731)
they allow for encrypted transfer of files and hence represent a risk to medical records

This could go either way, actually. Unencrypted transfer of files is obviously risky and if it's through a 3rd party provider (AOL, GTalk, etc.) then there is a risk of confidential medical information being intercepted.

Alternatively, maybe there needs to be internal records of who has sent or received which files. Encrypting files makes it harder for the administration to know who has what.

I'm leaning towards the first explanation of the danger of unencrypted file exchange, but I could be wrong.

Re:Why corporate IT should unchain our office computers by tptacek on Thursday August 27, 2009 @02:11AM (#788763)
HIPAA isn't like GLBA; it doesn't have the tracking requirement. It's just unusually explicit that PHI needs to be encrypted in flight.