Technical Safeguards
Is the use of encryption mandatory in the Security Rule?
Do the Security Rule requirements for access control, such as automatic logoff, apply to employees who telecommute or have home-based offices if the employees have access to electronic PHI (e-PHI)?
Does the Security Rule allow for sending electronic PHI (e-PHI) in an email or over the Internet? If so, what protections must be applied?
Does the Security Rule require the use of an electronic or digital signature?
Does the Security Rule mandate minimum operating system requirements for the personal computer systems used by a covered entity?