I have trouble with a vendor making such claims. 

As we all know, HIPAA is all about protecting information regardless of
where it is used/stored. If their claims were true, then how are the
thousands of health-care givers who practice tele-medicine, home health care
services, wireless workstations, and many others going to comply with the
rules/regs set forth by HIPAA.

If their claim were true then PDA's (portable device, similar to a laptop in
that respect), would also have the same issues.

Thank You,

Lee Kelly, CISSP
Manager, Assessment Services
Fortrex Technologies
[EMAIL PROTECTED]
1-877-Fortrex - Office
1-301-906-6269 - Cell

-----Original Message-----
From: William Dobson [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 25, 2002 2:06 PM
To: Jeff Carswell; [EMAIL PROTECTED]
Subject: RE: Laptop Security Compliance

Encryption on portable devices is recommended to our clients whenever there
is confidential or proprietary information on them, or when they are clients
to a more robust VPN solution.

The device can't be HIPAA compliant!  It's the user or organization that
needs to operate the device in such a way as to remain HIPAA compliant.
Strong telecommuting policies are also dictated whenever critical or
sensitive information is ported on PDAs and laptops.   That's industry best
practice....nothing special to HIPAA.

William H. Dobson, Jr, CISSP
Federal Business Development
Information Assurance Assessments
Trustwave Corporation, Annapolis, MD
Office 410-573-6910 x 2622
Cell    301-655-8548
Fax    410-571-8493



-----Original Message-----
From: Jeff Carswell [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 24, 2002 9:20 PM
To: '[EMAIL PROTECTED]'
Subject: Laptop Security Compliance


Recently our company was visited by a vendor selling a Palm based EMR
solution and they made the statement, "Under HIPAA there is no way to make a
laptop compliant if it is being used out in the field".  Can this really be
true??  If anyone has additional info or links to regs that speak directly
to this issue it would be greatly appreciated.

Thanks.

Jeff Carswell
Vice President, Corporate Development
Affiliated Sante Group

**********************************************************************
To be removed from this list, go to:
http://snip.wedi.org/unsubscribe.cfm?list=privacy
and enter your email address.


**********************************************************************
To be removed from this list, go to:
http://snip.wedi.org/unsubscribe.cfm?list=privacy
and enter your email address.

**********************************************************************
To be removed from this list, go to: http://snip.wedi.org/unsubscribe.cfm?list=privacy
and enter your email address.

Reply via email to