For organizations that deal with protected health information (PHI) and must comply with HIPPA regulations:
Is Your Remote Backup System (RBS) HIPAA Compliant?
The Short Answer:
The appcomm, inc. Remote Backup System complies with the Final Security Rule, but please read on...
Our RBS Software compresses and encrypts data before it is sent to the RBS Server. The Encryption Key is known only to the customer, and is never transmitted to the Server nor to appcomm, inc. Data are stored on the RBS Server in compressed and encrypted archives that are not accessible by the RBS Service Provider.
The Remote Backup Software is adequate to help companies comply with the Final Security Rule. RBS also complies with the Privacy section, even though RBS Providers are not "Covered Entities" as defined by the current rules, and thus are not required to comply with it.
In addition, appcomm, inc. can help customers comply with other provisions of the rules as part of a larger data protection and disaster recovery plan. At the time of this writing there is no "HIPAA Compliance" certification for backup software, and it is important to note that under the current rules, no software is truly "HIPAA compliant," because there are no regulations that specifically address backup and privacy software.
|
