Protected health care information (PHI) stored on a USB flash drive must be encrypted with an accredited Federal Information Processing Standard (Publication 140-2) cryptology. Standard USB Flash drive can be made compatible by adding encryption software.