Re: HIPPA measures to comply

[PaulMmn <PaulMmn@xxxxxxxxxxxxx>]

As I understand it, communications over a public network can not be 
'in the clear;' they need to be encrypted.  I don't know about a 
private network (say within your company) or a dial-up link to a 
provider of some sort.

I had to sign a non-disclosure agreement where I work ("I promise not 
to tell anyone anything unless someone higher up tells me (in 
writing) that it's legal to do so").  Anyone with security 
officer-type clearance needed to sign such an agreement.

Our AS/400s don't reveal a lot of information to the world, and we've 
always had tighter security on our HR/PY (Human Resources / Payroll) 
libraries to keep people from peeking.  And it's always been assumed 
that if you have authorization to look at these libraries you better 
keep your mouth shut about what you see!  Now it's legally binding.

CynicalMode(*ON)

Of course, our HR/PY departments issued all employees the "what The 
Company can and can't and won't reveal" memo.  Reading it, it seems 
there are more exceptions than protections.  I am reasonably certain 
that they can still tell anyone anything anytime, but now they have 
to document it.  (:

CynicalMode(*OFF)

--Paul E Musselman
PaulMmn@xxxxxxxxxxxxxxxxxxxx