Email Archiving Legal Requirements
HIPAA stands for Health Insurance Portability and Accountability Act also called data protection laws, it is created to provide data processing and security requirements for securing medical information of patients. Under HIPAA guidelines each business associate as well as covered entities retain the follow data for at 6 six years from creation date or last effective date and it depends on whichever happens to be later.
What the Law Requires
- A written or electronic record of an agency being classified as a CE (e.g. health plan, associated company, etc.) or BA.
- Information protection and privacy policies and procedures set in place to comply with HIPAA.
- All of the recorded situations, activities and evaluations required by HIPAA.
- Both data use agreements and other ways that endorse compliance with HIPAA.
- Both signed authorizations and, where appropriate, written confirmations of receipt of a notice or evidence of good faith attempt to obtain such written recognition.
- Notice of Privacy Policies for organizations that are expected to provide it.
- Designated record sets which are subject to individual access.
- Information Security and Privacy Policies.
- Employee Sanction Policies.
- Incident and Breach Notification Documentation.
- Complaint and Resolution Documentation.
- Physical Security Maintenance Records.
- Logs Recording Access to and Updating of PHI. IT Security System Reviews (including new procedures or technologies implemented).
HIPAA says that cover entities must report any guidance, plan, action or evaluation carried out in order to comply with HIPAA policies. HIPAA Retention Requirements also knew as addressable requirements just a division of the widespread list which applies to CEs and their business associates. HIPAA makes a distinction between HIPAA-related medical and non-medical records that must be viewed separately.
Federal e-mail archiving regulations are intended to protect both your business and your clients. Whenever a court case is filed, achieved email can serve as great significant evidence.
